~ / topics / PHP

PHP

2 stories on this subject, newest first.

2 storiesSecurity

summarylive

entries2

latest21 Oct

all subjectsA–Z

~/topics/php — entries2

Wednesday 21 October 20261 story

Security / PHP

The critical PHP RCEs are out, with fixes for every supported branch

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical unauthenticated RCEs, CVE-2026-109618 and CVE-2026-109619, and the project's own advice is blunt: there are no complete mitigations, updating is the only safe choice.

4 min read

Tuesday 20 October 20261 story

Security / PHP

PHP pre-announces a critical security release for 21 October, 14:00 UTC

The PHP security team will publish a security release on Wednesday 21 October at 14:00 UTC with fixes for two vulnerabilities rated CVSS v4.0 9.2. Affected versions, CVE ids and fixed builds come with the release, so the task now is to know which PHP your services run.

2 min read

more insections

Security→