On October 26, the US Cybersecurity and Infrastructure Security Agency (CISA) added PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 to ...