PHP pre-announces critical security release fixing two CVSS 9.2 vulnerabilities on Oct 21
jedisct1 · x · 2026-10-21
The PHP security team has given advance notice of a security release on October 21, 2026 at 14:00 UTC, addressing two critical vulnerabilities both rated CVSS v4.0 9.2. All PHP users are urged to prepare to upgrade immediately.
The release may come earlier if details leak or active exploitation appears. Also in the news archive: PHP 8.6.0 RC3 available for testing and PHP 8.4.26 security release.
Related event: PHP core hit by CVSS 10.0 RCE flaw as emergency patch looms(4 posts)→
More from coding & agent
- RoboARC shows robots get no free retries—unlike coding agents that can just rerun tests — ManlingLi_ · 2026-10-21
- Anthropic open-sources 11 Claude plugins for sales, legal, finance and more knowledge work — mhdfaran · 2026-10-21
- Pixlet display turns Claude agent status into a physical dashboard — whurley · 2026-10-21
- Ding CAD Goes Down, Revealing Its User Base Is Far Bigger Than Its Creator Expected — yacineMTB · 2026-10-21
- If your evals pass 100% of the time, they've stopped telling you anything — HamelHusain · 2026-10-21
- Hamel Husain ranks AI eval methods: engineers can't replace human experts for subjective agent output — HamelHusain · 2026-10-21