PHP

SecurityOct 22, 2026

PHP fixes two critical remote code execution bugs: update now

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 close two flaws that can allow unauthenticated remote code execution. What is affected, what to update and what to do if you cannot update today.