Wikipedia hides its PHP version. Prevent 'unnecessary reconnaissance' with a single line of configuration

When I peeked at my company's website using the browser extension 'Wappalyzer,' it proudly displayed 'PHP 8.3.36.' It's ...
Notebookcheck

PHP2Shell leaves millions of servers on PHP versions with no official fix

PHP2Shell fixes skip older branches. See how many servers run PHP versions with no official patch, which backports exist, and what admins need to do about it soon.
The Next Web

PHP rushes out emergency patches for two critical bugs AI found first

OpenAI calls PHP2Shell ‘one of the most impactful security issues in recent memory’, and says frontier AI found it before attackers did.

What I did to migrate from PHP 7.4 to 8.2 without stopping production | Amazon Linux 2, AMI, and yum dependency errors

IntroductionIn October 2026, information regarding a critical security vulnerability in PHP was disclosed.The official PHP ...
Notebookcheck

PHP2Shell: Critical PHP flaws hit mod_php servers hardest

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical flaws that allow unauthenticated code execution, in some setups before any application code runs. Here is what goes wrong in the interpreter, ...
Gadget Review

The Internet Is Burning: Two Critical PHP Flaws Are Letting Hackers Into Millions of Servers

PHP2Shell vulnerabilities CVE-2026-109618 and CVE-2026-109619 allow unauthenticated code execution on PHP servers; patch to 8.2.35 or later now.
Tom's Hardware on MSN

OpenAI says ChatGPT Sol helped uncover critical PHP flaws that could affect 70% of websites

OpenAI says researchers using GPT-5.6 Sol uncovered two critical PHP vulnerabilities with severity scores of 9.2 and ...

PatchMyPHP launches a free PHP vulnerability checker that shows website owners in under a minute whether the October 2026 PHP flaw (CVE-2026-109618) leaves them exposed

A free PHP vulnerability checker from PatchMyPHP lets any website owner find out in less than a minute whether the ...