News and Updates – I.Web Nepal Pvt Ltd https://iwebnepal.com.np Since 2005 Wed, 28 Oct 2026 06:34:10 +0000 en-US hourly 1 https://wordpress.org/?v=7.1.4 https://iwebnepal.com.np/wp-content/uploads/2025/08/cropped-android-chrome-192x192-1-32x32.png News and Updates – I.Web Nepal Pvt Ltd https://iwebnepal.com.np 32 32 Critical PHP Security Release https://iwebnepal.com.np/2026/10/28/critical-php-security-release-cve-2026-109618-and-cve-2026-109619/ Wed, 28 Oct 2026 06:06:59 +0000 https://iwebnepal.com.np/?p=3404 The majority of websites are written in PHP, which has two significant security issues. On the same nite that the remedy was announced, we secured every website on our servers, so you don’t need to do any action.
The PHP team revealed two serious security vulnerabilities, CVE-2026-109618 and CVE-2026-109619, on October 21, 2026. The severity rating for both is 9.2 out of 10.

To put it simply, an attacker may send a website a specially constructed request and, in the worst scenario, execute their own code. They wouldn’t require an account or a password. Almost all PHP websites worldwide, regardless of the hosting they use, were impacted by the weaknesses in PHP’s handling of file uploads and session data.

On the same day, PHP issued patched versions 8.2.35, 8.3.36, 8.4.27, and 8.5.12. Older versions, including PHP 5.6 and 7.x, require additional security because official fixes are no longer available.

]]>