PHP security advisory (AV26-1070)

Serial Number: AV26-1070Date: October 21, 2026 As of October 21, 2026, PHP is affected by vulnerabilities in the following product: PHP 8.5.x versions prior to 8.5.12 8.4.x versions prior to 8.4.27 8.3.x versions prior to 8.3.36 8.2.x versions prior to 8.2.35 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. PHP Security advisory: Critical remote code execution vulnerabilities, update now Upcoming Critical PHP Security Release PHP Security Releases