On 20 October, the PHP developers announced an upcoming security release addressing two critical vulnerabilities. Both vulnerabilities have been rated 9.2 out of 10 under the CVSS 4.0 scoring system. The release is scheduled for 21 October 2026 at 14:00 UTC. Full details of the vulnerabilities, affected PHP versions, and available fixes will be ...