25 October 2026
PHP needs an update this week.
On 21 October 2026 PHP published fixes for two critical flaws. On a server that is still on an older release, an unauthenticated web request can be enough to run code. Updating is the fix.
Read the article