PHP patches two critical RCE flaws affecting web servers as Cloudflare reports early exploit attempts, with no confirmed breaches.
PHP updates Windows builds 8.2 through 8.5 to fix a Brotli flaw that could enable code execution through automatic cURL ...
PHP urges organizations to deploy the fixes immediately, as threat actors start abusing the php2shell bug ...
The PHP development team has released emergency security updates to fix PHP2Shell, two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that ...
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical flaws that allow unauthenticated code execution, in some setups before any application code runs. Here is what goes wrong in the interpreter, ...
Two significant vulnerabilities in the PHP programming language could allow hackers to execute code remotely. PHP has ...
The PHP project released PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35 on October 21, 2026, security releases that fix two critical vulnerabilities that can allow unauthenticated remote code execution and ...
PHP released emergency patches today fixing two critical remote code execution vulnerabilities rated CVSS v4.0 9.2, affecting every web server running PHP 5.4 or later — a population spanning an ...
The PHP security team released emergency security patches for two critical remote code execution (RCE) vulnerabilities (CVE-2026-109618 and CVE-2026-109619) tracked collectively as PHP2Shell.
PHP is a programming language tailored for web development, and it now supports nearly 70 percent of the world’s websites. We ...
Ads are what make it possible to produce new content on Phoronix each and every day over the past 20 years. Please support Phoronix by disabling your ad blocker. Alternatively, you can join Phoronix ...