Tell HN: I unknowingly broke the PHP RCE embargo. I am sorry.

A PHP developer apologized on Hacker News for unknowingly breaking a coordinated disclosure embargo by posting about critical remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619), claiming he was unaware an embargo existed. However, commenters pointed out that the vulnerabilities were already leaked and being exploited before his post, and questioned whether he should bear responsibility for breaking an embargo he wasn't informed about.