# Critical Vulnerabilities in PHP

**URL:** <https://forums.realmacsoftware.com/t/critical-vulnerabilities-in-php/57913>\
**Category:** Hosting\
**Created:** [October 21, 2026, 10:02am UTC](https://forums.realmacsoftware.com/t/critical-vulnerabilities-in-php/57913 "2026-10-21T10:02:45Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Hugo](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/hugo/32/10935_2.png) [@Hugo](https://forums.realmacsoftware.com/u/Hugo)\
**Post date:** [October 21, 2026, 10:02am UTC](https://forums.realmacsoftware.com/t/critical-vulnerabilities-in-php/57913/1 "2026-10-21T10:02:45Z")

</div>

70 per cent of the web runs on PHP, but there’s a massive bug in it. The EU says: update it or shut it down. The update will be released at 14:00 UTC.

> **[Critical Vulnerabilities in PHP](https://cert.europa.eu/publications/security-advisories/2026-018/)**
>
> Critical Vulnerabilities in PHP

FAQ: About PHP Remote Code

> **[PHP Remote Code Execution FAQ: CVE-2026-109618 | watchTowr](https://watchtowr.com/intelligence/php-cve-2026-109618-faq/)**
>
> CVE-2026-109618 FAQ: affected PHP versions, fixes and more - updated as details emerge.

---

<div class="post-metadata">

**Author:** ![differentdan](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/differentdan/32/33530_2.png) [@differentdan](https://forums.realmacsoftware.com/u/differentdan)\
**Post date:** [October 21, 2026, 12:00pm UTC](https://forums.realmacsoftware.com/t/critical-vulnerabilities-in-php/57913/2 "2026-10-21T12:00:05Z")

</div>

Hi @Hugo

Thanks for the post. We are aware of the reports and will release more information shortly. Stay tuned.

---

<div class="post-metadata">

**Author:** ![PLM](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/plm/32/31094_2.png) [@PLM](https://forums.realmacsoftware.com/u/PLM)\
**Post date:** [October 21, 2026, 12:20pm UTC](https://forums.realmacsoftware.com/t/critical-vulnerabilities-in-php/57913/3 "2026-10-21T12:20:07Z")

</div>

Off the topic, but the first site is a perfect example how **not** to use light grey text on a lighter grey background - [CERT-EU - Critical Vulnerabilities in PHP](https://cert.europa.eu/publications/security-advisories/2026-018/)

---

<div class="post-metadata">

**Author:** ![MichaelDroste](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/michaeldroste/32/37212_2.png) [@MichaelDroste](https://forums.realmacsoftware.com/u/MichaelDroste)\
**Post date:** [October 21, 2026, 1:47pm UTC](https://forums.realmacsoftware.com/t/critical-vulnerabilities-in-php/57913/4 "2026-10-21T13:47:01Z")

</div>

Interesting- website jammed - finally able to load…

---

<div class="post-metadata">

**Author:** ![differentdan](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/differentdan/32/33530_2.png) [@differentdan](https://forums.realmacsoftware.com/u/differentdan)\
**Post date:** [October 21, 2026, 1:53pm UTC](https://forums.realmacsoftware.com/t/critical-vulnerabilities-in-php/57913/5 "2026-10-21T13:53:36Z")

</div>

Might want to ask Dreamhost about that.. 😉
