Service providers operating PHP-based platforms please take note of a PHP advisory addressing two critical vulnerabilities, both rated CVSS v4.0 9.2
A patch is scheduled for Wednesday, 21 October 2026 at 14:00 UTC
2 Boosts
0 Likes
@iftas Apparently this is already being exploited in the wild so if you are unable to patch at this moment it is strongly recommended to shutdown your PHP application until the patch is live.
@iftas @lloydw 🤔