New on LowEndTalk? Please Register and read our Community Rules.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
PHP Security Patches Are Out: Have You Updated Your VPS?
PHP has released security patches for two critical vulnerabilities (CVSS 9.2) that could allow unauthenticated remote code execution.
If you're running PHP applications like WordPress, Laravel or PrestaShop on a VPS or dedicated server, now is a good time to check your PHP version.
The patched versions are:
PHP 8.2.35
PHP 8.3.36
PHP 8.4.27
PHP 8.5.12
At CubePath, we wanted to share a quick reminder with the community: if you're managing your own server, make sure your PHP installation is updated and your services are running the patched version.
For those running PHP in production, how do you handle critical security updates without causing downtime?
Official PHP announcement: https://www.php.net/archive/2026.php#2026-10-21-5
This discussion has been closed.
Comments
I pray they don't scan for my IP as i'd rather cry about the result, than put the time in to update.
https://lowendtalk.com/discussion/222375/php-security-advisory-critical-remote-code-execution-vulnerabilities-update-now-21-oct-2026
I'm not sure that we need another thread about this
Thread closed