CZ: Smart-contract vulnerability

TL:DR: Binance founder Changpeng Zhao (CZ) issued a warning on October 21, 2026, regarding two critical flaws in the PHP core, tracked as CVE-2026-109618 and CVE-2026-109619. The vulnerabilities, collectively dubbed “PHP2Shell”, carry a 9.2 out of 10 severity rating and allow remote code execution without prior authentication. W3Techs data indicates that PHP powers 70.5% of ... Read more

Evidence boundary

Confidence describes the coverage of the available evidence. It is not a safety rating and does not guarantee that a protocol or asset is safe.

Sources

• https://crypto-economy.com/cz-warns-crypto-users-to-stay-alert-as-php-vulnerabilities-put-web-servers-at-risk/

Record history

First seen: 2026-10-22T21:53:12.000Z. Last updated: 2026-10-22T22:42:33.311Z. Revision: 1.