We increased security protections in response to critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. The additional WAF restrictions briefly affected authentication and some editing/API functionality due to false-positive security rules. The affected rules have been adjusted and functionality is restored. PHP security patches have been deployed across our servers, with additional mitigations retained for the related CVE-2026-115560 advisory.