SlowMist's MistEye threat intelligence system conducted a global scan of PHP-related assets across the crypto industry following the disclosure of two critical remote code execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619. Both are rated 9.2 under CVSS v4.0 and could allow unauthenticated attackers to execute code on affected servers under certain conditions. PHP released security patches on October 21, covering versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35. SlowMist urged crypto exchanges, DeFi platforms, and wallet providers to assess their exposure and apply the updates promptly.