CRITICALVulnerability
Global

PHP Announces Critical Security Release for Two Vulnerabilities

·Source: Qualys Blog

Updated:

Executive Summary

On October 20, 2026, the PHP security team announced an upcoming security release addressing two critical vulnerabilities, each rated CVSS v4.0 9.2. The release is scheduled for October 21, 2026, at 14:00 UTC. PHP has indicated that the updates may be released earlier if vulnerability details become public or evidence of active exploitation emerges. Public […]

Analysis

On October 20, 2026, the PHP security team announced an upcoming security release addressing two critical vulnerabilities, each rated CVSS v4.0 9.2. The release is scheduled for October 21, 2026, at 14:00 UTC. PHP has indicated that the updates may be released earlier if vulnerability details become public or evidence of active exploitation emerges. Public […]
Source Attribution

Originally published by Qualys Blog on Oct 21, 2026.

Related Threats

MEDIUMVulnerabilityNEW

HHS Confirms HIPAA Penalties Will Not Be Adjusted for Inflation This Year

This week, the Department of Health and Human Services (HHS) has confirmed via the Federal Register that it will not […] The post HHS Confirms HIPAA Penalties Will Not Be Adjusted for Inflation This Year appeared first on The HIPAA Journal .

HIPAA Journal
MEDIUMVulnerabilityNEW

Signal Vulnerability Lets Malicious Callers Block Hang-Ups

Affecting the open source calling library RingRTC, the bug prevented calls from ending properly. The post Signal Vulnerability Lets Malicious Callers Block Hang-Ups appeared first on SecurityWeek .

SecurityWeek
MEDIUMVulnerability

Coinbase fined €3.25m by Irish central bank

Crypto exchange Coinbase Ireland has been penalised by the Central Bank of Ireland (CBI) for a series of operational and governance failings over a five-year period.

Finextra