# Live news

Canonical: https://ournews.ai/live/46c044f3-0430-4873-986e-4bdcf9d7c586
Published: 2026-10-21T16:40:21.995647+00:00
Updated: 2026-10-21T16:40:21.995647+00:00

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 patch two critical unauthenticated remote-code-execution flaws; maintainers urge immediate updates for web-serving installations. Partial mitigations do not make systems safe.

Source: PHP security team — https://www.php.net/archive/2026.php#2026-10-21-5
Source date: 2026-10-21