Critical Security Vulnerabilities Discovered in PHP
The PHP security team has released an important security advisory addressing two critical vulnerabilities that could allow attackers to remotely execute malicious code on affected servers without authentication.
CYBERSECURITY
Critical Security Vulnerabilities Discovered in PHP
The PHP security team has released an important security advisory addressing two critical vulnerabilities that could allow attackers to remotely execute malicious code on affected servers without authentication.
The vulnerabilities affect PHP installations used to serve websites and web applications, potentially putting a wide range of online services at risk.
Security fixes have been released in PHP versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35. All PHP users and server administrators are strongly encouraged to update immediately to protect their systems.
Users running older, unsupported PHP versions should check with their hosting providers or software vendors for available security fixes or consider upgrading to a supported version.
For more information: https://www.php.net/archive/2026.php#2026-10-21-5