PHP 8.4.27
AI overview
Sign in and the AI will write an overview from our coverage.
Headlines · 1
- PHP releases fixes for two critical unauthenticated RCE flaws
PHP released PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to fix CVE-2026-109618 and CVE-2026-109619, two critical flaws that can enable unauthenticated remote code execution under certain conditions. The PHP project said the bugs involve memory corruption and stale state in core memory-management and error-handling paths. Simon Willison’s Weblog and The Next Web reported that AI tools assisted vulnerability research and report validation, while the PHP Foundation retained human responsibility for selecting patches and assessing compatibility costs.
Hacker News 首页（100+ 分） · 🔥 0
Experience and discussion from the community
Share my PHP 8.4.27 experienceAsk about PHP 8.4.27
Nobody has shared their experience with PHP 8.4.27 yet.