https://www.infoq.com InfoQ PHP News feed https://www.infoq.com/news/2026/10/php-critical-rce-patches/?utm_campaign=infoq_content&utm_source=infoq&utm_medium=feed&utm_term=PHP-news <img src="https://res.infoq.com/news/2026/10/php-critical-rce-patches/en/headerimage/generatedHeaderImage-1792866020447.jpg"/><p>PHP released 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to fix two critical vulnerabilities allowing unauthenticated remote code execution. Amazon recorded an exploitation attempt four days before the patches shipped, and operators spent the day working out whether they ran PHP, where to get the package, and how to tell it had landed.</p> <i>By Steef-Jan Wiggers</i> PHP8 PHP Security Web Development Development Culture & Methods Architecture & Design news Sun, 25 Oct 2026 18:07:00 GMT https://www.infoq.com/news/2026/10/php-critical-rce-patches/?utm_campaign=infoq_content&utm_source=infoq&utm_medium=feed&utm_term=PHP-news Steef-Jan Wiggers 2026-10-25T18:07:00Z /news/2026/10/php-critical-rce-patches/en