Upcoming Critical PHP Security Release
Summary
PHP is issuing an upcoming security release to address two critical vulnerabilities rated CVSS v4.0 9.2. The release is scheduled for Oct 21, 2026 at 14:00 UTC, with a notice that it may occur earlier if details are disclosed or active exploitation is observed. The message urges PHP users to prepare for patching and highlights the urgency of applying fixes promptly.