Letter of the Week
-
Published 21 October 2026 · Based on advisories and coverage available on release day The short version On 21 October 2026 the PHP project shipped emergency updates for two critical bugs in PHP itself. Researchers and vendors are calling the pair “PHP2Shell.” Each scores 9.2 out of 10 (CVSS v4.0), and each can let an…
