Skip to content
Threat Feed
Subscribe

Product

PHP (< 8.5.12, < 8.4.27, < 8.3.36, < 8.2.35)

1 brief RSS
critical advisory

PHP: Two critical vulnerabilities ahead of scheduled security release

PHP has announced two critical vulnerabilities rated CVSS v4.0 9.2 and a security release scheduled for 21 October at 14:00 UTC. Exploit details and affected versions are not yet confirmed by PHP.

PoC PHP +5 security-release rce vulnerability
1t 2c updated