The classifier judged this item not relevant to AI security, so it is left out of lists, feeds, the API and dataset releases. If that is wrong, report a correction on this page.
InfoNews
Today's PHP Security Release, and How We're Strengthening PHP Security
- Published
- Record updated
Summary
Two remote code execution vulnerabilities in PHP, affecting the entire PHP 8.x line, were patched in a release on October 21, 2026. CVE IDs for the flaws leaked on October 20 with an incorrect CVSS score of 10.0 (actual 9.2), and a security firm then mistakenly published a video showing a working proof of concept, accelerating public exploit development. Wiz Research reported the bugs to the PHP security team on August 24, 2026, after using AI tools to find them.
Mitigation
Upgrade to the patched PHP 8.x releases published today, October 21, 2026.