{"id":48066,"date":"2026-10-21T19:31:08","date_gmt":"2026-10-21T10:31:08","guid":{"rendered":"https:\/\/jore2.com\/?p=48066"},"modified":"2026-10-21T19:31:08","modified_gmt":"2026-10-21T10:31:08","slug":"news-22191-upcoming-critical-php-security-release-cve-2026-109618-109619","status":"publish","type":"post","link":"https:\/\/jore2.com\/?p=48066","title":{"rendered":"PHP \uc6d0\uaca9 \ucf54\ub4dc \uc2e4\ud589 \ucde8\uc57d\uc810 \ud328\uce58 \uacf5\uac1c \uc804 \uacf5\uaca9 \uc2dc\uc791"},"content":{"rendered":"<div class=\"jore2-editor-byline\">\n<p><strong>\ud55c\uc11c\uc900<\/strong><\/p>\n<\/div>\n<p>PHP \uac1c\ubc1c\ud300\uc774 \ub450 \uac1c\uc758 \uce58\uba85\uc801\uc778 \uc6d0\uaca9 \ucf54\ub4dc \uc2e4\ud589 \ucde8\uc57d\uc810\uc5d0 \ub300\ud55c \uc218\uc815 \uc0ac\ud56d\uc744 2026\ub144 10\uc6d4 21\uc77c \uc624\ud6c4 2\uc2dc UTC\uc5d0 \uacf5\uc2dd\uc801\uc73c\ub85c \ubc30\ud3ec\ud560 \uc608\uc815\uc774\ub2e4. \ud574\ub2f9 \ucde8\uc57d\uc810\uc740 \uac01\uac01 CVE-2026-109618\uacfc CVE-2026-109619\ub85c \uc2dd\ubcc4\ub418\uba70, \ubcf4\uc548 \ud3c9\uac00 \uc810\uc218\ub294 CVSS v4.0 \uae30\uc900 9.2\uc810\uc73c\ub85c \ub9e4\uc6b0 \ub192\uc740 \uc704\ud5d8 \ub4f1\uae09\uc744 \ubc1b\ub294\ub2e4.<\/p>\n<p>\uc774\ubc88 \ubcf4\uc548 \ub9b4\ub9ac\uc2a4\ub294 PHP 5.4.0 \uc774\uc0c1\uc758 \ubaa8\ub4e0 \ubc84\uc804\uc5d0\uc11c \ubc1c\uc0dd\ud55c\ub2e4. Magento, Shopware, WooCommerce \ub4f1 \uc8fc\uc694 \uc804\uc790\uc0c1\uac70\ub798 \ud50c\ub7ab\ud3fc\uc744 \ud3ec\ud568\ud574 \uad11\ubc94\uc704\ud55c \uc6f9 \uc11c\ubc84 \ud658\uacbd\uc774 \ub300\uc0c1\uc774\ub2e4. Sansec Forensics Team\uc740 \ud328\uce58 \uacf5\uac1c \ud6c4 15\ubd84 \uc774\ub0b4\uc5d0 \ub300\uaddc\ubaa8 \uacf5\uaca9\uc774 \ubc1c\uc0dd\ud560 \uac83\uc73c\ub85c \uc608\uc0c1\ud588\ub2e4.<\/p>\n<p>\uc2e4\uc81c\ub85c \uc774\ubbf8 \ucd08\uae30 \uacf5\uaca9 \uc9d5\ud6c4\uac00 \ud3ec\ucc29\ub418\uc5c8\ub2e4. Cloudflare\ub294 \uac19\uc740 \ub0a0 \uc624\uc804 7\uc2dc 43\ubd84 UTC\ub97c \uae30\uc900\uc73c\ub85c PHP \uc0ac\uc774\ud2b8\ub97c \ub300\uc0c1\uc73c\ub85c \ud55c \uc120\uc81c\uc801 \uacf5\uaca9\uc774 \ubc1c\uc0dd\ud588\ub2e4\uace0 \ubcf4\uace0\ud588\ub2e4. \uc774\ub4e4\uc740 \uc0c8\ub85c\uc6b4 \uacf5\uaca9 \ubca1\ud130\uac00 \ub4f1\uc7a5\ud568\uc5d0 \ub530\ub77c \uc644\ud654 \uc870\uce58\ub97c \uc9c0\uc18d\uc801\uc73c\ub85c \uc5c5\ub370\uc774\ud2b8\ud558\uace0 \uc788\ub2e4\uace0 \ubc1d\ud614\ub2e4.<\/p>\n<p>\ucde8\uc57d\uc810 \uc815\ubcf4\uac00 \uc0ac\uc804\uc5d0 \uc720\ucd9c\ub418\uba74\uc11c \uc0c1\ud669\uc774 \ub354\uc6b1 \uae34\ubc15\ud574\uc84c\ub2e4. 10\uc6d4 20\uc77c \uad00\ub828 \ub0b4\uc6a9\uc774 \uc678\ubd80\ub85c \ud758\ub7ec\ub098\uc654\uace0, watchTowr \ubcf4\uc548 \uc5c5\uccb4\ub294 \uc774\ub97c \uc6d0\uaca9 \ucf54\ub4dc \uc2e4\ud589 \ucde8\uc57d\uc810\uc73c\ub85c \ud655\uc778\ud588\ub2e4. \uc775\uc2a4\ud50c\ub85c\uc787 \ub3c4\uad6c\uc778 PHP2Shell\uc758 \uc2a4\ud06c\ub9b0\uc0f7\ub3c4 \ud568\uaed8 \uc720\ud3ec\ub418\uc5b4 \uc545\uc6a9 \uac00\ub2a5\uc131\uc744 \ub192\uc600\ub2e4.<\/p>\n<p>\uc0ac\uc6a9\uc790\uac00 \uc8fc\uc758\ud574\uc57c \ud560 \uc810\uc740 \uc778\ud504\ub77c \uc218\uc900\uc758 \ub300\uc751\uc774 \ud544\uc218\ub77c\ub294 \uac83\uc774\ub2e4. \uc2a4\ud1a0\uc5b4 \ub0b4\ubd80 \ucf54\ub4dc\ubca0\uc774\uc2a4\ub9cc\uc73c\ub85c\ub294 \ubb38\uc81c\ub97c \ud574\uacb0\ud560 \uc218 \uc5c6\ub2e4. \ubc18\ub4dc\uc2dc \uc11c\ubc84\uc758 PHP \uc790\uccb4\ub97c \uc5c5\ub370\uc774\ud2b8\ud574\uc57c \ud55c\ub2e4.<\/p>\n<p>\ud2b9\ud788 RHEL \uacc4\uc5f4 \uc11c\ubc84\uc5d0\uc11c Remi \uc800\uc7a5\uc18c\ub97c \uc0ac\uc6a9\ud558\ub294 \uacbd\uc6b0 \uc624\ub298 \uc911\uc73c\ub85c \uc5c5\ub370\uc774\ud2b8\uac00 \uc81c\uacf5\ub418\uc9c0 \uc54a\ub294\ub2e4.<\/p>\n<p>Remi \uc800\uc7a5\uc18c\ub294 \uc790\uc6d0\ubd09\uc0ac\uc790 \uc6b4\uc601 \uccb4\uc81c\ub85c \uc778\ud574 \uc774\ubc88 \uae34\uae09 \ud328\uce58\ub97c \uc989\uc2dc \ubc18\uc601\ud558\uc9c0 \ubabb\ud55c\ub2e4. \ub530\ub77c\uc11c \uc0ac\uc6a9\uc790\ub294 \ubc30\ud3ec\ud310 \uae30\ubcf8 PHP \ud328\ud0a4\uc9c0\ub85c \uc804\ud658\ud558\uac70\ub098 \uc18c\uc2a4 \ucf54\ub4dc\ub85c \uc9c1\uc811 \ube4c\ub4dc\ud558\ub294 \ubc29\uc2dd\uc744 \uace0\ub824\ud574\uc57c \ud55c\ub2e4. \ud328\uce58\uac00 \uacf5\uac1c\ub418\ub294 \uc989\uc2dc \uc124\uce58\ud560 \uc218 \uc788\ub3c4\ub85d \uc900\ube44 \ud0dc\uc138\ub97c \uac16\ucdb0\uc57c \ud55c\ub2e4.<\/p>\n<p>Hacker News \ucee4\ubba4\ub2c8\ud2f0\uc5d0\uc11c\ub294 \ud328\uce58 \uc870\uae30 \uacf5\uac1c\ub97c \uc694\uad6c\ud558\ub294 \ubaa9\uc18c\ub9ac\ub3c4 \uc788\uc5c8\uc9c0\ub9cc, \uc774\ub294 \uc624\ud788\ub824 \uc545\uc131 \ucf54\ub4dc \uc81c\uc791\uc744 \uc6a9\uc774\ud558\uac8c \ud560 \uc218 \uc788\ub2e4\ub294 \uc6b0\ub824\ub3c4 \uc81c\uae30\ub410\ub2e4. \ud604\uc7ac\ub85c\uc11c\ub294 \uc815\ud574\uc9c4 \uc2dc\uac04\uae4c\uc9c0 \uae30\ub2e4\ub9ac\ub294 \uac83\uc774 \uc720\uc77c\ud55c \uc120\ud0dd\uc9c0\ub2e4.<\/p>\n<p>\uacf5\uc2dd \uae30\uc220 \uc138\ubd80 \uc0ac\ud56d\uacfc \uace0\uc815\ub41c \ubc84\uc804 \uc815\ubcf4\ub294 10\uc6d4 21\uc77c \uc624\ud6c4 2\uc2dc UTC\uc5d0 PHP \ub274\uc2a4 \uc6f9\uc0ac\uc774\ud2b8\ub97c \ud1b5\ud574 \uacf5\uac1c\ub420 \uc608\uc815\uc774\ub2e4. \ub9cc\uc57d \uacf5\uaca9\uc774 \uc2ec\ud654\ub418\uac70\ub098 \uc815\ubcf4\uac00 \ub354 \ub9ce\uc774 \uc720\ucd9c\ub420 \uacbd\uc6b0 PHP \uc7ac\ub2e8\uc740 \uc608\uace0 \uc5c6\uc774 \ud328\uce58\ub97c \uc55e\ub2f9\uae38 \uad8c\ud55c\uc744 \ubcf4\uc720\ud558\uace0 \uc788\ub2e4.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>2026\ub144 10\uc6d4 21\uc77c \uc624\ud6c4 2\uc2dc UTC\uc5d0 PHP \ubcf4\uc548 \uc5c5\ub370\uc774\ud2b8\uac00 \ubc30\ud3ec\ub41c\ub2e4. CVE-2026-109618\uacfc CVE-2026-109619\ub85c \ucd94\uc801\ub418\ub294 \uc774 \ucde8\uc57d\uc810\uc740 PHP 5.4 \uc774\uc0c1 \ubc84\uc804\uc744 \uc0ac\uc6a9\ud558\ub294 \ubaa8\ub4e0 \uc6f9 \uc11c\ubc84\uc5d0 \uc601\ud5a5\uc744 \ubbf8\uce5c\ub2e4.<\/p>\n","protected":false},"author":3,"featured_media":48065,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jore2_quality_policy":"people-first-v2","footnotes":""},"categories":[405],"tags":[31889,31888,31890,28291,31891],"class_list":["post-48066","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-405","tag-cve-2026-109618","tag-php","tag-31890","tag-28291","tag-31891"],"featured_image_urls":{"full":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/10\/news-22191-upcoming-critical-php-security-release-cve-2026-109618-109619.png",1200,630,false],"thumbnail":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/10\/news-22191-upcoming-critical-php-security-release-cve-2026-109618-109619-150x150.png",150,150,true],"medium":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/10\/news-22191-upcoming-critical-php-security-release-cve-2026-109618-109619-300x158.png",300,158,true],"medium_large":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/10\/news-22191-upcoming-critical-php-security-release-cve-2026-109618-109619-768x403.png",640,336,true],"large":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/10\/news-22191-upcoming-critical-php-security-release-cve-2026-109618-109619-1024x538.png",640,336,true],"1536x1536":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/10\/news-22191-upcoming-critical-php-security-release-cve-2026-109618-109619.png",1200,630,false],"2048x2048":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/10\/news-22191-upcoming-critical-php-security-release-cve-2026-109618-109619.png",1200,630,false],"morenews-large":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/10\/news-22191-upcoming-critical-php-security-release-cve-2026-109618-109619-825x575.png",825,575,true],"morenews-medium":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/10\/news-22191-upcoming-critical-php-security-release-cve-2026-109618-109619-590x410.png",590,410,true]},"author_info":{"info":["\ud55c\uc11c\uc900"]},"category_info":"<a href=\"https:\/\/jore2.com\/?cat=405\" rel=\"category\">\ub274\uc2a4<\/a>","tag_info":"\ub274\uc2a4","comment_count":"0","_links":{"self":[{"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/posts\/48066","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/jore2.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=48066"}],"version-history":[{"count":0,"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/posts\/48066\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/media\/48065"}],"wp:attachment":[{"href":"https:\/\/jore2.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=48066"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jore2.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=48066"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jore2.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=48066"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}