MoneroForum
Monerica468x60_v1Your ad here
Social World News & Events Started Oct 21, 2026 2:33 PM

Two critical security vulnerabilities in PHP, if you run it, you should definitely update.

4 replies - 454 views - 1 thanks - 0 tippers - 4 watchers

Oct 21, 2026 2:33 PM
#1
php website

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to update immediately.

Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed. We consider the risk highest for mod_php, with a demonstrated exploit where an unauthenticated request can trigger the attack before any application code runs.

https://www.php.net/archive/2026.php#2026-10-21-5

We even took our site down early because of this, since it started to look like some people had figured out the exploits early. https://ko-net.ws/php/

Signature

Ko-Net - Privacy focused, free-speech VPS hosting.

1 thanks - 0 tippers - 4 watchers
Monerica468x60_v1Your ad here

Replies

Page 1 of 1 - 4 total
Oct 22, 2026 6:26 PM
#3

It affects WordPress, Joomla and Drupal if the memory allocation is around 128 mb.
That way PHP can be overwhelmed and force a premature server shut down.
There are not too many people around who actually can pull that off. And to what gain.
You note the critical instance, take the IP and notify the ISP.

Signature

Contact me if you are in need for a new marketing approach!

0 thanks - 0 tippers
Login to tip
Oct 22, 2026 8:02 PM
#4

@NickZ2 I have already seen a few sites hacked since the patch came out, I would suggest to be on the side of caution for this.

Signature

Ko-Net - Privacy focused, free-speech VPS hosting.

0 thanks - 0 tippers
Login to tip
Oct 23, 2026 4:23 AM
#5

The PHP core team released fixed versions of PHP2Shell (CVE-2026-109618 and CVE-2026-109619) on Wednesday, October 21, 2026. So it has been officially patched already.

0 thanks - 0 tippers
Login to tip

Post A Reply

You must be logged in to reply. Login or register.