Binance founder Changpeng Zhao, better known as CZ, said in a post on X that two recently disclosed PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, may affect servers running applications such as WordPress and Magento. He said details of the flaws leaked before patches were released, with the fixes published on Oct. 21. Soon after the information became public, confirmed exploitation cases appeared.
According to CZ, attackers do not need authentication to abuse affected websites. The flaws could be used to steal visitor credentials or launch attacks against users’ devices. He added that IT teams are now deploying Web Application Firewall, or WAF, protections and installing patches. CZ urged users to be extra careful when visiting any website over the next few days.
Binance founder Changpeng Zhao, or CZ, said in a post on X that two recently disclosed PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, may affect servers running applications including WordPress and Magento.
CZ said details of the vulnerabilities leaked before patches were released. The patches were published on Oct. 21, and confirmed exploitation cases appeared shortly after the information was exposed.
He said attackers can exploit affected websites without authentication to steal visitor credentials or launch attacks on their devices. IT teams are currently deploying Web Application Firewall (WAF) protections and installing patches. CZ urged users to exercise extra caution when visiting any website over the next few days.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
