PHP security team announces upcoming release fixing two critical flaws

The PHP security team gave advance notice of a security release scheduled for 21 October 2026 at 14:00 UTC. Per a Mastodon post, it addresses two critical vulnerabilities, each rated CVSSv4 9.2.

Timeline

1. 20 Oct, 19:51 UTCPHP team announces upcoming security release

Top sources

• The PHP security team is giving advance notice of an upcoming security release scheduled for Wed, 21 October 2026 at 14:PHP