![php[architect] logo](/wp-content/themes/phpa/images/new_logo_mark_nav.png){kind=logo}
Out of Memory, Out of Bounds:
October’s PHP Emergency Release
By Eric Mann
On October 21, 2026, the PHP project [shipped 8.2.35, 8.3.36, 8.4.27, and 8.5.12](https://phpa.me/2026-11-security-corner-01) to fix two unauthenticated remote code execution flaws. Both are rated CVSS 9.2. A score of 10.0 circulated online beforehand, and it was wrong. by Eric Mann
This article was originally published in the November 2026 issue of php[architect] magazine. To read the complete article please subscribe or purchase the complete issue.
Leave a comment
Use the form below to leave a comment: