Recent Critical PHP Vulnerabilities: The Moziflow Desktop App Does Not Use PHP
The Moziflow desktop app does not use or depend on PHP. Moziflow users are unaffected by these critical PHP vulnerabilities and do not need to take any action.
The Moziflow desktop app is not built with PHP and does not depend on PHP to run. Moziflow users are unaffected by these vulnerabilities and do not need to take any action.
What happened?
On October 21, 2026, the PHP team released security updates addressing two critical vulnerabilities: CVE-2026-109618 and CVE-2026-109619. These vulnerabilities could allow attackers to execute malicious code on affected servers without authentication. The PHP team strongly urges those running affected PHP environments to update immediately. Official PHP security advisory