CZ urges caution after reported PHP vulnerabilities and exploitation

教主先赚三千万 · 2026-10-22T00:36:05.000Z

<a href="https://app.binance.com/uni-qr/cact26user/692?uc=app_square_share_link&us=copylink">If these updates are helpful, click here to vote for “交易员教主” in Blockchain 100 and support our continued updates.</a>CZ urges caution after reported PHP vulnerabilities and exploitationAn October 22 report says Binance founder Changpeng Zhao warned users on X to be especially cautious when visiting websites over the coming days. The account identifies two PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, affecting servers running applications including WordPress and Magento. It says vulnerability details leaked before patches were released on October 21, with confirmed exploitation reported shortly after the leak.According to the account, unauthenticated attackers could turn affected websites into tools for stealing visitors' credentials or attacking their devices. IT teams were reportedly deploying web application firewall protections and installing patches. These are claims described in the report; it does not list affected PHP versions or establish that every site using the named applications is compromised. The reported patch date and exploitation timing should be distinguished from the security status of any individual website.Reported: 10-22 00:16 UTC<a href="https://www.binance.com/en/square/hashtag/EarningsSeason">#EarningsSeason</a> <a href="https://www.binance.com/en/square/hashtag/ZcashDevelopersConfirmNovemberDateForNU7Upgrade">#ZcashDevelopersConfirmNovemberDateForNU7Upgrade</a> <a href="https://www.binance.com/en/square/hashtag/OCCIssuesFirstFinalRuleUnderGENIUSAct">#OCCIssuesFirstFinalRuleUnderGENIUSAct</a>

If these updates are helpful, click here to vote for “交易员教主” in Blockchain 100 and support our continued updates.
CZ urges caution after reported PHP vulnerabilities and exploitation
An October 22 report says Binance founder Changpeng Zhao warned users on X to be especially cautious when visiting websites over the coming days. The account identifies two PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, affecting servers running applications including WordPress and Magento. It says vulnerability details leaked before patches were released on October 21, with confirmed exploitation reported shortly after the leak.
According to the account, unauthenticated attackers could turn affected websites into tools for stealing visitors' credentials or attacking their devices. IT teams were reportedly deploying web application firewall protections and installing patches. These are claims described in the report; it does not list affected PHP versions or establish that every site using the named applications is compromised. The reported patch date and exploitation timing should be distinguished from the security status of any individual website.
Reported: 10-22 00:16 UTC
#EarningsSeason #ZcashDevelopersConfirmNovemberDateForNU7Upgrade #OCCIssuesFirstFinalRuleUnderGENIUSAct