PHP Critical Vulnerabilities Leaked Before Patch

By Editorial Team | October 21, 2026
Seven padlocks on a steel rail, three rusted and four brass, one with a blue tag, under the headline Critical PHP Flaws Leaked Before the Patch

Two critical PHP vulnerabilities leaked before their patch, early attacks are reported, and the EU’s CERT says internet-facing applications may need to be isolated until it is installed. PHP’s security team has scheduled the fix for October 21 at 14:00 UTC (16:00 CEST). Both flaws are rated CVSS v4.0 9.2, and researchers report remote code…

Read More