PHP Releases Security Updates to Fix Two Critical Vulnerabilities Allowing Remote Code Execution on Servers
💻 22 October 2026, PHP disclosed two critical vulnerabilities allowing remote code execution. PHP released patches for versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35. WP Engine and UP Hotel Agency confirmed their servers are updated, requiring no customer action. Users with different hosting should verify updates with their providers. Dedicated server managers should ensure running patched PHP versions. Older PHP versions are unsupported; upgrading is recommended. Visit [php.net](https://www.php.net/) for more details.
Share