Security news
PHP vulnerabilities and patches
Articles on PHP vulnerabilities, and the latest fixed versions we have checked.
Subscribe by RSSLatest patches
| Product / branch | Fixed version | Released | Supported until | Checked | Source |
|---|---|---|---|---|---|
| PHP 8.5 | 8.5.12 | 21 October 2026 | 31 December 2029 | 9 November 2026 | Official source (PHP 8.5) |
| PHP 8.4 | 8.4.27 | 21 October 2026 | 31 December 2028 | 9 November 2026 | Official source (PHP 8.4) |
| PHP 8.3 | 8.3.36 | 21 October 2026 | 31 December 2027 | 9 November 2026 | Official source (PHP 8.3) |
| PHP 8.2 | 8.2.35 | 21 October 2026 | 31 December 2026 | 9 November 2026 | Official source (PHP 8.2) |
Correct as of the date checked. Always confirm with the official source before updating. A version ending in "+" is the oldest release that contains the fix.
Latest articles
-
PHP Vulnerability CVE-2026-109618 (PHP2shell): What to Do Now
Critical PHP flaws CVE-2026-109618 and CVE-2026-109619 (PHP2shell) were patched in October 2026. How to check your PHP version, update and p...
-
PHP Upgrade Cost: Moving From PHP 5 or 7 to PHP 8
What drives the cost of a PHP upgrade, how it differs from a patch, and how to commission a move from PHP 5 or 7 to PHP 8, Laravel or CakePH...
Unsure how to go about updating?
Talk to us about updating an older system or taking over its maintenance. The consultation is free.