Search
5 stories for“php vulnerability explained”
PHP's own engine, not any one app, carries two memory bugs rated CVSS 9.2. Here is what they do, which versions are hit and what the patched releases fix.
Oct 22, 2026
Researchers confirmed code execution on a long list of PHP apps, some governments and hosts pulled services offline, and one count has about 884,000 hosts advertising end-of-life PHP.
Oct 22, 2026
Update PHP first, find every copy you run, treat old versions as a risk, and use stopgaps with their costs in mind. A plain checklist for sites that cannot wait.
Oct 22, 2026
Two months of coordinated work unravelled in about 24 hours. Who found the PHP bugs, how the details got out, and what each source says about attacks and breaches.
Oct 22, 2026
A bug seen in 2024 went unfixed, a leak scrambled the embargo, and hundreds of thousands of hosts run branches with no upstream patch. Reported views on what failed and what held.
Oct 22, 2026
