Oct 21, 2026, 4:55 AM🚨 A heads-up for anyone running #WordPress, #Moodle, #Nextcloud or other PHP-based services.
PHP has confirmed two critical vulnerabilities, both rated 9.2/10. Fixes are scheduled for today, 21 October, at 14:00 UTC.
Prepare to patch PHP, not just your applications. CERT-EU advises considering temporary isolation of public-facing services if prompt patching isn't possible.
It sounds pretty bad. Affected versions are not yet confirmed but I've heard 5.4+
