Skip to content
Threat Feed
Subscribe

Product

PHP (< 8.2.35, < 8.3.36, < 8.4.27, < 8.5.12)

1 brief RSS
critical advisory

PHP: Two critical vulnerabilities ahead of scheduled security release

PHP has announced two critical vulnerabilities rated CVSS v4.0 9.2 and a security release scheduled for 21 October at 14:00 UTC. Exploit details and affected versions are not yet confirmed by PHP.

exploited PoC PHP +10 security-release rce vulnerability
1t 2c updated