vulnerability
Imported story
New Serious PHP Vulnerabilities Released and Patched
Source: Schneier on Security · Published · Source updated Oct 22, 2026 14:36 UTC · Last checked 1 hour ago · 1 min read
Read original source ↗ (www.schneier.com)
Publisher excerpt From Schneier on Security
PHP maintainers have released fixes for two critical vulnerabilities: PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to update immediately. Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed. We consider the risk highest for mod_php, with a demonstrated exploit where an unauthenticated request can trigger the attack before any application code runs...
Excerpt only, shown with attribution. This content belongs to the original publisher and has not been independently verified by CyberSecurity.pk.