CERT24Critical Vulnerabilities in PHPLoading data…
CERT24Threat Observatory
Period

Critical Vulnerabilities in PHP

CERT-EU reported that on 20 October 2026 the PHP Foundation announced an upcoming security release addressing two critical vulnerabilities in PHP. The vulnerabilities could lead to unauthenticated remote code execution and could affect all PHP versions from PHP 5 onwards. No technical details had been made public.

← Back to intelligence

Critical Vulnerabilities in PHP

CERT-EU reported that on 20 October 2026 the PHP Foundation announced an upcoming security release addressing two critical vulnerabilities in PHP. The vulnerabilities could lead to unauthenticated remote code execution and could affect all PHP versions from PHP 5 onwards. No technical details had been made public.