⚠️ We have been informed by CERT of an issue affecting PHP:
https://cert.europa.eu/publications/security-advisories/2026-018 https://www.php.net/archive/2026.php#2026-10-20-1
This would affect all online PHP servers and operations including Nextcloud as well as WordPress and other popular services.
The CERT recommendation is to turn off servers running PHP based applications until updates to PHP are available and can be applied.
We will release an update as soon as more information is known about affected PHP versions and availability of updates.
The PHP project has released fixes for the vulnerabilities.
We urge you to update to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35, released on 21.10.26.
Nextcloud AIO v14.4.1 and Nextcloud E-AIO v8.4.0 will include the updated PHP versions. We will publish these versions once the underlying base images are available.
Official advisory: https://www.php.net/index.php#2026-10-21-5
PHP