PHP ships emergency fixes for two 9.2/10 RCE vulnerabilities
MickeySteamboat · x · 2026-10-21
PHP security advisories disclose two remote code execution vulnerabilities rated 9.2/10: one via OOM corruption and one via stale global state. Users should upgrade to 8.2.35, 8.3.36, 8.4.27, or 8.5.12 ASAP; patches are rolling out now.
Related event: PHP Patches Two Critical Unauthenticated RCE Flaws Across Four Releases(26 posts)→
More from coding & agent
- Building WhatsApp agents for clients: who handles the human handoff? — flavia-f · 2026-10-21
- Too many MCP tools: internal data says 77% of agent tokens are wasted — Jazzlike-Form9669 · 2026-10-21
- Agents and software companies can coexist — the bar is trust, not code quality — andreisavu · 2026-10-21
- Buying software means paying for a team that decides how it improves — can agents replace it? — andreisavu · 2026-10-21
- Does opencode phone home even with local models? Users flag data concerns — Unusual_Principle536 · 2026-10-21
- QAMCP: open-source CLI to test MCP servers and spot hidden prompt injections — abhiramreddykalluru · 2026-10-21