Tell HN: I unknowingly broke the PHP RCE embargo. I am sorry.
A user on Hacker News expresses regret for prematurely disclosing information about upcoming PHP remote code execution (RCE) vulnerabilities, CVE-2026-109618 and CVE-2026-109619, which disrupted the coordinated disclosure schedule and created additional workload for others.
Read the full article at news.ycombinator.com →