Original Summary

⚠️⚠️⚠️⚠️ An RCE vulnerability in PHP core! ALL VERSIONS AFFECTED. Only PHP 8 will receive patches. https://x.com/h4x0r_dz/status/2112620404309184734 https://www.php.net/archive/2026.php#2026-10-20-1 Make sure to update your servers ASAP tomorrow when patches are released. The release is scheduled for Wednesday, 21 October 2026 at 14:00 UTC Because once they're out in public, vulnerabilities will be exploited throughout the internet for sure. 🤯 Via @s13k_ (My idea was disconnect all my servers from the web before it, then update PHP, then test if it's safe, then put them back online?) The PHP Foundation : The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2. PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence. Link: https://x.com/ThePHPF/status/2112633155631108544

  • 情报分类：综合情报
  • 分类依据：内容未命中明确的垂直分类规则，归入综合情报
  • 信息来源：AI / AI前沿 / levelsio @levelsio
  • 发布时间：2026/10/21 05:30:57