🚨 There is a critical flaw in PHP that leads to remote code execution. A patch is has not been released yet.
If you run DokuWiki or any other PHP software, I would recommend shutting down the webserver until official mitigation steps and/or a patch is available.
https://www.vincentschmalbach.com/cve-2026-109618-and-cve-2026-109619-what-you-should-do-now/
DokuWiki
npub1qf…3mghd
2026-10-21 05:26:23 UTC
Author Public Key
npub1qfuq6k4qhaamc5el4zr2nw9d67ejxpxks8cs8wa77z6n4n8hve5qj3mghdSeen on
wss://relay.ditto.pubPublished at
2026-10-21 05:26:23 UTCEvent JSON
{
"id": "dbaf98294939014c066dcc0f7c9bda3f76c5e365dc11026902c3facc8042470a",
"pubkey": "02780d5aa0bf7bbc533fa886a9b8add7b32304d681f103bbbef0b53accf76668",
"created_at": 1792560383,
"kind": 1,
"tags": [
[
"proxy",
"https://phpc.social/users/dokuwiki/statuses/117477237268830031",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "🚨 There is a critical flaw in PHP that leads to remote code execution. A patch is has not been released yet. \n\nIf you run DokuWiki or any other PHP software, I would recommend shutting down the webserver until official mitigation steps and/or a patch is available.\n\nhttps://www.vincentschmalbach.com/cve-2026-109618-and-cve-2026-109619-what-you-should-do-now/",
"sig": "3d0084a87dc812ee918823d044d14e189c3b59966f5062459d0b5ae098ff4b46e0720abe9c25071fb7f44d0388ed2c8f402142372a8d28f86d3bbe193fb12d67"
}