PHP Security Release Oct 2026: Patch CVE-2026-109618 Now

PHP security release October 2026 banner showing patched versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35 with CERT-In CIVN-2026-0510 critical alert

On 21 October 2026 the PHP team pushed out an emergency PHP security release for two bugs that let an attacker run code on your server without logging in. The fixed versions are PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. PHP.net…

Expand +