English => News => Topic started by: Redaktion on October 21, 2026, 21:52:18
Title: PHP2Shell: Critical PHP flaws hit mod_php servers hardest
Post by: Redaktion on October 21, 2026, 21:52:18
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical flaws that allow unauthenticated code execution, in some setups before any application code runs. Here is what goes wrong in the interpreter, which SAPIs are most exposed and which interim mitigations PHP recommends.