Technology1 min read

Upcoming Critical PHP Security Release

By · Published by Everything Blog

In short

We want to inform you of an upcoming PHP security release that addresses two critical vulnerabilities (both rated CVSS v4.0 9.2, Critical). We encourage all PHP users to prepare now so you can update as soon as it is available. We reserve the right to release earlier if details of either vulnerability become public, or if we see evidence of active exploitation in the wild.

Key points

  • We want to inform you of an upcoming PHP security release that addresses two critical vul…: We want to inform you of an upcoming PHP security release that addresses two critical vulnerabilities (both rated CVSS v4.0 9.2, Critical).
  • We encourage all PHP users to prepare now so you can update as soon as it is available.: We encourage all PHP users to prepare now so you can update as soon as it is available.
  • We reserve the right to release earlier if details of either vulnerability become public,…: We reserve the right to release earlier if details of either vulnerability become public, or if we see evidence of active exploitation in the wild.

Sources checked by our analysis pipeline: 1

From: | Jakub Zelenka | Date: | Tue, 20 Oct 2026 19:33:47 +0000 |

Subject: | Upcoming Critical PHP Security Release | ||

Groups: | php.announce | ||

Request: | Send a blank email to php-announce+get-509@lists.php.net to get a copy of this message |

We want to inform you of an upcoming PHP security release that addresses

two critical vulnerabilities (both rated CVSS v4.0 9.2, Critical).

The release is scheduled for Wednesday, 21 October 2026 at 14:00 UTC. We

encourage all PHP users to prepare now so you can update as soon as it is

available.

We reserve the right to release earlier if details of either vulnerability

become public, or if we see evidence of active exploitation in the wild.

The PHP security team

Original source: news-web.php.net

Technology