這次曝光的兩個漏洞分別是CVE-2026-109618與CVE-2026-109619，根據PHP官方安全公告，兩者都可能讓未經身分驗證的攻擊者，只要送出單一惡意請求，就在應用程式本身的程式碼執行之前，直接取得伺服器的遠端程式碼執行權限。
Some results have been hidden because they may be inaccessible to you
Show inaccessible resultsSome results have been hidden because they may be inaccessible to you
Show inaccessible results