PHP Ships Emergency Fixes for Two CVSS 9.2 Flaws That Need One Request
Two CVSS 9.2 PHP flaws allow unauthenticated remote code execution. Patches shipped on 21 October 2026, but proof-of-concept code is already circulating.
By TPW Editorial8 min read