PHP core RCE vulnerability patches (CVE-2026-109618 and CVE-2026-109619)

Fortinet PSIRT advisories covering numerous vulnerabilities across Fortinet products, including multiple critical unauthenticated remote code execution, authentication bypass, arbitrary file write, path traversal, SQL injection, command injection, and sensitive-information exposure issues. The feed highlights a path traversal/NULL-byte flaw reportedly exploited in the wild, as well as two PHP core vulnerabilities enabling remote code execution. Additional issues include denial of service, access-control bypasses, XSS, SSRF-like proxy abuse, and OpenSSL certificate-parsing DoS.