Harald EilertsenHarald Eilertsen wrote the following post Wed, 21 Oct 2026 09:47:41 +0200

Heads up: Upcoming Critical PHP Security Release

A couple of critical security patches will be released by the PHP team today at 14:00 UTC. Evreryone running any PHP applications (such as Hubzilla) should prepare to upgrade as soon as possible.

While details of the patches are not yet public they do allow remote code execution, and are expected to be exploited pretty much immediately upon release.

Original announcement: https://www.php.net/archive/2026.php#2026-10-20-1

More details: https://arstechnica.com/security/2026/10/php-maintainers-tell-web-devs-to-prepare-themselves-for-critical-security-patches/

Be aware that your home routers/wifi access points etc are likely to be running possibly outdated PHP versions as well!

#security #php #admin #advisory