# PHP CVE-2026-109618 & CVE-2026-109619

**URL:** https://forums.vitalpbx.org/t/php-cve-2026-109618-cve-2026-109619/6481
**Category:** Reporting an Issue
**Created:** [October 21, 2026, 7:07pm UTC](https://forums.vitalpbx.org/t/php-cve-2026-109618-cve-2026-109619/6481 "2026-10-21T19:07:26Z")
**Posts on this page:** 1
**Showing post:** 3

<div class="post-metadata">

### Author: ![miguel](https://forums.vitalpbx.org/user_avatar/forums.vitalpbx.org/miguel/32/415_2.png) [@miguel](https://forums.vitalpbx.org/u/miguel)
#### Post date: [October 21, 2026, 7:13pm UTC](https://forums.vitalpbx.org/t/php-cve-2026-109618-cve-2026-109619/6481/3 "2026-10-21T19:13:35Z")

</div>

Here are all the instructions:

> [@Critical Security Update: PHP 8.2.35 Now Available for Debian 12](https://forums.vitalpbx.org/t/critical-security-update-php-8-2-35-now-available-for-debian-12/6482):
>
> Debian 12 has released the patched PHP version addressing the recently disclosed critical vulnerabilities: CVE-2026-109618 CVE-2026-109619 These vulnerabilities affect PHP 8.2 and may allow unauthenticated remote code execution under certain conditions. The patched version is: PHP 8.2.35 For additional information about these vulnerabilities, please refer to the CERT-EU security advisory: Update Instructions Run the following commands to update the PHP 8.2 packages currently installed o…

---

_[View the full topic](https://forums.vitalpbx.org/t/php-cve-2026-109618-cve-2026-109619/6481)._