Trust Wallet declared that its applications and key infrastructure do not use PHP, confirming that the discovery of two critical vulnerabilities does not affect its clients. The flaws CVE-2026-109618 and CVE-2026-109619 enable, in particular, the remote execution of arbitrary code without authentication on servers running PHP. Developers released patches for PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, while BNB Chain and PancakeSwap also confirmed that their ecosystems do not depend on PHP. Binance founder Changpeng Zhao called on projects to publish their position publicly to limit false alarms and panic, while scammers could exploit the situation to distribute fake security updates.
Source: Read the original article
Disclaimer: this content is for information purposes only and is not financial advice. Cryptocurrencies are highly volatile: you may lose all of your capital. Always do your own research. Legal notice
