Security advisories

Know what needs attention—and what to do next.

Plain-English alerts about vulnerabilities that affect small businesses using Microsoft 365, Azure, Windows Server, PHP websites, firewalls and VPNs.

criticalactive

Published October 21, 2026

Critical PHP remote code execution flaws: update now

Two critical PHP vulnerabilities can allow unauthenticated remote code execution on web-facing servers. Supported PHP branches have patched releases available.

CVE-2026-109618CVE-2026-109619

Read the advisory

Know what needs attention—and what to do next.

Current security notices

Critical PHP remote code execution flaws: update now