Critical PHP Security Update: Two RCE Flaws Fixed in PHP 8.2 to 8.5 (October 2026)
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical remote code execution flaws (CVE-2026-109618, CVE-2026-109619). What it means and what to do.
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical remote code execution flaws (CVE-2026-109618, CVE-2026-109619). What it means and what to do.