Hacker News new | past | comments | ask | show | jobs | submit
dawnerd | on: Upcoming critical PHP security release (CVE-2026-109618 / -109619)
I tried it on a personal site, was able to dump the entire database. Immediately shut all my sites down. This is bad.
burnJS | parent | next
How can I try this to see if I should shut things down myself. I run a 6 figure stealth and have a day job for fintech in 9 figures all php so kinda worried
dawnerd | root | parent | next
Used this as a base: https://jackalsyn.com/posts/php-up-2026.html

But created my own based on it since it feels sketchy running someone else's exploit poc ya know. Ran it first in a vm before running it against a production site.

loading story #50177815
loading story #50176148
loading story #50176429
loading story #50176566
stackghost | root | parent | next
You make 9 figures at a fintech? Are you hiring?
loading story #50176152
theteapot | root | parent
You use PHP at a fintech?
burnJS | root | parent
One of many languages. It has its role.
lolakutty | root | parent
>It has its role...

Of being a hole...

loading story #50177214
loading story #50176889