Dear de.NBI Cloud Tübingen users,
today we were informed about two critical PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619,
CVSS 9.2) possibly allowing remote code execution without login.
Fixed versions come out today, 21 October, 16:00 CEST (Berlin/Paris).
- https://cert.eu…
Read more...