Blockchain security company SlowMist has issued a critical security alert concerning cryptocurrency exchanges, decentralized finance (DeFi) platforms, and cryptocurrency wallet providers worldwide. Two serious vulnerabilities discovered in the widely used PHP programming language could allow attackers to remotely execute code on vulnerable servers.
According to a statement by SlowMist, the company’s MistEye threat intelligence system conducted a global scan of PHP-based infrastructures in the cryptocurrency sector following the discovery of vulnerabilities.
Both vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619, received a risk score of 9.2 out of 10 on the CVSS 4.0 system. This score indicates that these vulnerabilities pose a critical security threat.
According to security experts, the discovered vulnerabilities, under certain conditions, could allow attackers to execute malicious code on vulnerable servers without needing any authentication.
According to the technical details revealed, the first vulnerability stems from how PHP handles memory shortages, while the second vulnerability arises from the possibility of using expired memory data between server requests.
Successful exploitation of such vulnerabilities could allow attackers to compromise server infrastructure and access sensitive data. The potential risk is considered particularly high for cryptocurrency platforms that offer services related to user accounts and financial transactions.
Critical Security Updates Released
On October 21, the PHP development team released PHP versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to address the two security vulnerabilities.
SlowMist has urged cryptocurrency companies to review PHP versions on their servers, prioritizing systems accessible over the internet, and to install security updates promptly.
PHP developers added that relying solely on access restrictions or temporary security measures is insufficient, and that applying relevant patches is essential for comprehensive protection.
*This is not investment advice.
