Skip to content
Sign in
StableReported 2026-10-22 11:56

PHP Foundation acknowledges that the delay in fixing a major security vulnerability is a structural failure.

The PHP Foundation acknowledged that the correction work had stalled after a major security vulnerability was discovered in 2024, and it was deemed a structural failure. The corrected version was released on October 21, 2026.

Why it matters. Multiple companies suspended services due to PHP security vulnerabilities, affecting internet security and user data protection.

01

Who and what it touches

WordPressusesDrupalusesApache 2usesDrupalusesJoomlausesWebsitesenablesMagentoenablesmemoryusesPHP

Into PHP

From PHP

Each line is a relation with evidence behind it, drawn in the direction it points. A line shows that two things are connected, not how far this change reaches.

02

Evidence

  • 日日経 xTECHMedia2026-10-22 11:56
    View source