🇿🇦 English, 21 October 2026, PHP vulnerabilities
PHP Releases Patches for Critical Flaws
PHP is rushing out fixes for two critical vulnerabilities that could allow attackers to run malicious code on vulnerable systems.
The patches are scheduled for release at 4pm South African time on Wednesday, and users are urged to upgrade as soon as the release is available.
The vulnerabilities, rated 9.2 out of 10 on the CVSS, could allow unauthenticated remote code execution, and the EU Computer Emergency Response Team (Cert-EU) has urged organisations to prepare to patch affected systems immediately.
Cloudflare is already seeing early attacks emerging and is updating its firewall rules as a stopgap measure, until the patches are available.