PHP 修复两个可远程执行代码的关键漏洞 CVE-2026-109618 和 CVE-2026-109619
PHP 出了两个能被远程执行代码的洞，Sourcegraph 给了现成的批量排查和修复方案，管代码库的可以照着跑一遍。
PHP 发布补丁，修复 CVE-2026-109618 和 CVE-2026-109619 两个关键漏洞，攻击者无需认证即可远程执行代码。由于企业代码库中往往同时存在多个 PHP 版本，逐一定位受影响仓库很困难。Sourcegraph 公开了搜索查询和 Agentic Batch Changes 配置，用于批量找出受影响仓库并推送补丁。
PHP released patches for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, that could allow attackers to execute code remotely without authentication.
Finding every affected PHP version across hundreds or thousands of repos is a challenge. We're sharing Sourcegraph search queries and Agentic Batch Changes specs to help you find and fix #php2shell vulns.
Learn more: https://t.co/3POXS763xs
Need help? Post a comment and we'll help you get Sourcegraph set up to find potentially affected repos and roll out patches.
