Checked fact 248923 Oct 2026Safety and security
The PHP project’s advisory of 21 October 2026 lists those at risk as "all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed".
The exact words it rests on
Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed.
What the source said when we opened it, on 23 Oct 2026.
The source
PHP News Archive 2026: security advisory and releases of 21 Oct 2026
Checked
Checked by the notis newsroom on , against the source above.
In the story
PHP patches two critical remote code execution flaws 23 Oct 2026
Cite this fact
Anyone may quote this address. It does not change; if we correct the story, this page says so.