78% of Thai hosts won't get PHP patch due to outdated versions
Of 18,701 Thai hosts disclosing their PHP version, 14,619 (78%) run PHP 8.1 or older and will receive no patches for two vulnerabilities rated CVSS 9.2. The global average is 59%, with South Korea at 82% and Cambodia at 79%.
- 78% of Thai hosts run PHP 8.1 or older vs 59% globally
- Patches will only cover branches 8.2, 8.3, 8.4 and 8.5
- Vulnerabilities are rated 9.2 under CVSS v4.0, not 10.0 as leaked posts claimed
- CVE-2026-109618 and CVE-2026-109619 are not yet listed in NVD
Read next
Security