
Oct 21, 2026
CVE-2026-109618 and CVE-2026-109619: Patched, With Zero Downtime
Two critical PHP remote code execution flaws went public on October 21, 2026. We had every node patched within minutes of the fix shipping, with no downtime for districts. Here's what happened and what to check on your own servers.
Read more





























