The PHP security team announced an upcoming critical security release scheduled for October 21, 2026, addressing two vulnerabilities rated CVSS 9.2. They also released PHP 8.4.26 as an immediate security update and announced the first RC of PHP 8.6.0 for testing.
Background
PHP is one of the most widely used server-side scripting languages, powering a significant portion of the web. Critical security releases are issued to address newly discovered vulnerabilities before they can be exploited at scale.
- Source
- Lobsters
- Published
- Oct 21, 2026 at 06:23 AM
- Score
- 8.0 / 10