Checked fact 250523 Oct 2026Safety and security
Calif’s timeline gives 1 August 2026 as the day Calif "discovered multiple different paths independently leading to RCE".
The exact words it rests on
2026 — August 1Calif discovered multiple different paths independently leading to RCE that resurfaced the 2024 issues and new trigger points.
What the source said when we opened it, on 23 Oct 2026.
The source
php2shell: a tale of two PHP remote vulnerabilities
Checked
Checked by the notis newsroom on , against the source above.
In the story
PHP patches two critical remote code execution flaws 23 Oct 2026
Cite this fact
Anyone may quote this address. It does not change; if we correct the story, this page says so.