Two flaws expose PHP web servers to remote attacks. Versions from the past 20 years are affected; admins should patch.
The PHP project released PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35 on October 21, 2026, security releases that fix two critical vulnerabilities that can allow unauthenticated remote code execution and ...
The maintainers of the globally used PHP scripting language released patches for two vulnerabilities after alerting users that the bugs were severe.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results