# PHP warns two emergency patches are due imminently

https://mins.news/en/item/108851

- Ars Technica, 2026-10-21 02:12 UTC
- Tech
- Original: https://arstechnica.com/security/2026/10/php-maintainers-tell-web-devs-to-prepare-themselves-for-critical-security-patches/

> PHP maintainers said Monday they plan to issue patches for two vulnerabilities, each rated 9.2 out of 10 in severity. They urged users to prepare to upgrade as soon as the fixes are released, while reserving the option to publish them sooner if details become public or active exploitation is detected.

## Related coverage

- [Two critical PHP flaws put websites worldwide at risk, with Russia especially exposed](https://mins.news/en/item/111930) — Meduza, 2026-10-22
- [Urgent security fix issued for code powering an estimated 70% of websites](https://mins.news/en/video/110868) — ABC News, 2026-10-22
- [Critical PHP vulnerabilities could take websites offline today](https://mins.news/en/item/109386) — The Verge, 2026-10-21