PHP advances release and patches critical remote-code-execution flaws a day early
The PHP project released PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 on October 21, 2026, fixing two critical vulnerabilities that could let unauthenticated attackers execute code on PHP servers. The release was moved up by one day after the CVE identifiers began…
