There are two recently disclosed critical PHP vulnerabilities (CVE-2026-109618
and CVE-2026-109619) which can allow for unauthenticated remote code
execution. I am reaching out to see: 

1 - If Win HTTrack is vulnerable to CVE-2026-109618 or CVE-2026-109619? 
2 - If Yes, what patch or upgrade fixes it, when will it be available, and how
do we obtain it? 


Thanks,