Urgent: PHP Security Advisory Warns of Critical Remote Code Execution (RCE) Vulnerabilities — Update Immediately

On October 21, 2026, the PHP development team issued a critical security advisory alongside new patch releases: PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35. These releases address two critical vulnerabilities that allow unauthenticated remote code execution (RCE). All PHP users are strongly urged to update as soon as possible.








