Tell HN: I unknowingly broke the PHP RCE embargo. I am sorry.
- PHP RCE: 2 events in the last 90 days
- Previous: earlier the same day · AWS rates PHP RCE as Important so Amazon Linux 2023 patch may take 20 days
What happened
I posted here about the then-upcoming PHP RCEs related to CVE-2026-109618 & CVE-2026-109619. I appreciate this has had considerable knock-on effects with the schedule for co-ordinated disclosure, and created additional workload. I am truly sorry. I take full responsibility for my actions. It was not remotely my intention to cause any of the subsequent side effects. At the time of posting, I didn't know about any emb…
Summary assembled by rule from the sources below