PHP devs publish critical bug fix as site owners warned: Pull 'em offline if you're unpatched
Source ↗
👁 0
💬 0
PHP developers have released emergency updates for two critical vulnerabilities after cybersecurity authorities warned organizations to patch immediately or consider taking exposed applications offline.PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35 address CVE-2026-109618 and CVE-2026-109619, which can allow unauthenticated remote code execution. The project's developers urged users to update immediately.All PHP installations serving web requests are potentially affected, including deployments using PHP
Comments (0)