2026-018: Critical Vulnerabilities in PHP
- Actief misbruik
- Niet bevestigd
- Hoogste CVSS
- —
- Kans op misbruik (EPSS)
- —
- Prioriteit
- 70 van 100
Uit de melding
On 20 October 2026, the PHP foundation announced an upcoming security release addressing two critical vulnerabilities in PHP that could lead to remote code execution, according to other leaks.
At this time, no technical details have been made public. CERT-EU advises organisations to prepare for immediate patching of affected assets. Where immediate patching is not feasible, organisations should consider isolating internet-facing applications from public networks until a fix is available.
The PHP team has scheduled the release for 21 October 2026 at 14:00 UTC.
Lees de volledige melding bij CERT-EU Security AdvisoriesBron: CERT-EU Security Advisories, CC BY 4.0, samengevat en vertaald door Seinwacht.