I'm keeping a list [1] of all the (possible) precautions one can take, ahead of the patches appearing in a few hours. Exploits are now circulating, according to Cloudflare's CTO, so _any_ mitigation is worth investigating

https://ma.ttias.be/php-cve-2026-109618-early-mitigation/

▲

petesergeant 2 hours ago | parent [-]

Your article contains:

> Both block automated requests, so I could not check their text myself.

Are you automated?

	▲	Mojah 2 hours ago \| parent [-]
		There's a disclaimer at the top that anything below the intro was largely written by an LLM. That section is updated now