CVE-2026-109618 and CVE-2026-109619 let an unauthenticated request run code on a PHP server. What broke, who is exposed, how to patch, and how to build PHP yourself on a distro that is out of support.
Switching over to CachyOS wasn't as pretty as i thought it would. All i wanted to do is Gaming. I ended up fixing one issue after another. Some of it has to do with the weird setup i have going on.