Oct 21, 2026 · @iwaa_securityCritical PHP alert: CVE-2026-109618 and CVE-2026-109619 – what Nextcloud administrators need to doOct 21, 2026 · @iwaa_security

Oct 21, 2026 · @iwaa_security Two critical PHP vulnerabilities (score 9.2/10) allow an attacker to take control of a web server without authentication. Fixes have been available since 21 October 2026: update PHP to 8.5.12, 8.4.27, 8.3.36 or 8.2.35 without delay. Every internet-facing PHP application is affected, including Nextcloud, WordPress, Moodle and Mautic. This article […]