# CERT-FR warns of attempts to exploit PHP vulnerabilities

> CERT-FR has reported attempts to exploit vulnerabilities CVE-2026-109618 and CVE-2026-109619, which target certain PHP deployments.

**In brief**: Cyber event (severity: low) nationwide, first detected on 26 October 2026 at 17:09. Reported by 3 sources (3 articles), last updated on 28 October 2026 at 21:39. Part of the story “CERT-FR publishes a series of advisories and alerts on vulnerabilities”.

- Category: Cyber
- Severity: Low
- Place: Nationwide
- First detected: 26 October 2026 at 17:09
- Updated: 28 October 2026 at 21:39
- Story: [CERT-FR publishes a series of advisories and alerts on vulnerabilities](https://acturadar.com/en/stories/33-cert-fr-publishes-a-series-of-advisories-and-alerts-on-vulnerabilities.md)
- Web page: https://acturadar.com/en/events/883-cert-fr-warns-of-attempts-to-exploit-php-vulnerabilities

## Sources (3 articles)

- [@CERT_FR : ⚠️ Mise à jour : alerte CERT-FR ⚠️ Le CERT-FR constate des tentatives d'exploitation des vulnérabilités CVE-2026-109618 et CVE-2026-109619 ciblant des déploiements spécifiques…](https://x.com/CERT_FR/status/2114751354317283685) — X (Twitter), 26 October 2026 at 17:09
- [@ANSSI_FR : MàJ ⚠️Vulnérabilités PHP.](https://x.com/ANSSI_FR/status/2115465066002985183) — X (Twitter), 28 October 2026 at 16:25
- [Il ne faut pas "considérer que le problème est définitivement résolu": l'Anssi alerte sur des "impacts secondaires" liés aux failles PHP](https://www.bfmtv.com/tech/cybersecurite/il-ne-faut-pas-considerer-que-le-probleme-est-definitivement-resolu-l-anssi-alerte-sur-des-impacts-secondaires-lies-aux-failles-php_AD-202610280917.html) — BFMTV / RMC, 28 October 2026 at 21:39

---

Cite as: Acturadar, “CERT-FR warns of attempts to exploit PHP vulnerabilities”, https://acturadar.com/en/events/883-cert-fr-warns-of-attempts-to-exploit-php-vulnerabilities
Methodology: https://acturadar.com/en/methodology