PHP Unveils Critical “Internet-Wide” Vulnerabilities: How Can Web3 Patch Its “Off-Chain Weaknesses”?
What Happened On October 21, the PHP project released emergency security updates to fix two critical vulnerabilities, CVE-2026–109618 and CVE-2026–109619, which could lead to unauthenticated remote code execution (RCE). Both were rated 9.2 under CVSS v4.0. The PHP team explicitly stated that before...