Skip to content
Threat Feed
Subscribe

Product

PHP (< 8.5.12, 8.4.27, 8.3.36, 8.2.35)

1 brief RSS
critical advisory

PHP: Two critical vulnerabilities ahead of scheduled security release

PHP has announced two critical vulnerabilities rated CVSS v4.0 9.2 and a security release scheduled for 21 October at 14:00 UTC. Exploit details and affected versions are not yet confirmed by PHP.

PoC PHP +9 security-release rce vulnerability
1t 2c updated