>>42985 (OP)CVE-2026-109618 & CVE-2026-109619 were found which host critical RCEs in the PHP core. Normally when these CVEs get documented patches are rolled out first, but this time some retard journalist blew the whistle on it early leading to a good portion of the internet being vulnerable to a highly critical exploit. Patch shipped out a few minutes ago