Comment by Mojah

I'm keeping a list [1] of all the (possible) precautions one can take, ahead of the patches appearing in a few hours. Exploits are now circulating, according to Cloudflare's CTO, so _any_ mitigation is worth investigating

https://ma.ttias.be/php-cve-2026-109618-early-mitigation/