SlowMist Flags PHP Risk in Crypto Systems Ahead of Critical Fixes

SlowMist has flagged potential exposure in crypto systems using PHP as the language's security team prepares fixes for two critical flaws that could allow attackers to run code remotely. The vulnerabilities are tracked as CVE-2026-109618 and CVE-2026-109619. Each has a 9.2 score under the Common Vulnerability Scoring System's fourth version. SlowMist's scan of PHP-based assets used in the crypto industry found signs of risk, prompting it to urge platforms, decentralized finance (DeFi) services and wallet providers to review their systems. Remote code execution could let an attacker run commands on an affected server from another location.

Also reported by The Defiant.

Source: TokenPost