[National Vulnerability Database: Comprehensive Rating for PHP Remote Code Execution Vulnerability is 'High Risk'] Golden Finance reports that on October 22, according to the National Vulnerability Database (CNVD), on October 21, 2026, the National Vulnerability Database recorded a PHP remote code execution vulnerability (CNVD-2026-41674, CNVD-2026-41675, corresponding to CVE-2026-109618, CVE-2026-109619). Unauthenticated remote attackers can craft malicious HTTP requests to trigger memory errors, potentially causing denial-of-service attacks, sensitive data theft, and remote code execution on target servers under specific conditions. Currently, the technical details and PoC of the vulnerability have been widely disseminated. CNVD recommends that affected users immediately upgrade to the latest version. CNVD has given this vulnerability a comprehensive rating of 'High Risk.' (National Vulnerability Database)