AWS published a security bulletin disclosing two CVEs (CVE-2026-109618 and CVE-2026-109619) affecting PHP web runtimes. Organizations running PHP workloads on AWS infrastructure should review and apply the relevant patches to mitigate the identified vulnerabilities.
Background
AWS provides managed PHP web runtime services for hosting web applications. CVE-2026-109618 and CVE-2026-109619 are recently disclosed vulnerabilities affecting these runtime environments, prompting AWS to issue a formal security bulletin.
- Source
- Hacker News (RSS)
- Published
- Oct 22, 2026 at 05:12 AM
- Score
- 6.0 / 10