PSA: Critical PHP Security Vulnerabilities - Immediate Updates Required

General Discussion
1

For those who haven’t been following the latest tech news, two critical security vulnerabilities have been disclosed in PHP that require IMMEDIATE attention.

21 Oct 2026
Security advisory: Critical remote code execution vulnerabilities, update now

These vulnerabilities could allow attackers to remotely execute malicious code on affected servers.

If you operate any servers, websites, or other computing resources that use PHP, it is imperative that you update to one of the newly released, patched versions IMMEDIATELY.

PHP 8.2.35, 8.3.36, 8.4.27, and 8.5.12 are the newly released versions containing the security fixes.

Do not delay applying these critical security updates.

6 Likes
2

Also, might as well pick 8.3+ and above , since 8.2+ will be EOL at the end of the year.

https://eosl.date/eol/product/php/

2 Likes