chiprook
← Security
SecurityOctober 22, 2026, 00:05

PHP Foundation limits RCE patches to PHP 8.2 and newer

The PHP Foundation said its fixes for two serious RCE vulnerabilities cover only PHP 8.2 and newer versions. Legacy deployments remain without official patches and depend on third-party vendors.

PHP Foundation limits RCE patches to PHP 8.2 and newer
#PHP
Read next
Security

PHP2Shell: two critical PHP flaws allow unauthenticated RCE

Security

PHP2Shell PoC chains session.upload_progress UAF into unauthenticated RCE

Security

Unconfirmed PHP2Shell exploit allegedly enables RCE on all PHP versions since 2004

AI

iOS 27's New Siri AI Requires Waitlist, Limited to iPhone 15 Pro and Newer