Topic
5 articles
CyberSecureToday covers PHP across 5 articles published between 26 Sep 2026 and 16 Nov 2026.
The coverage includes 5 vulnerability advisories. 4 advisories are rated critical or high severity, and 1 involves a flaw listed in CISA's Known Exploited Vulnerabilities catalog.
Stories on PHP most often intersect with PHP Improper Control of Filename for Include/Require S, Vulnerability Analysis and Patch & Fix, with Technology, Cloud & SaaS the most affected sector. The most recent story, “PHP Improper Control of Filename for Include/Require S Vulnerability Disclosed (CVE-2026-125795)”, was published 16 Nov 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.
Threat IntelCVE-2026-125795 in PHP Improper Control of Filename for Include/Require S (Security Vulnerability) allows remote attackers to trigger arbitrary code execut
Threat IntelCVE-2026-112832 in PHP Improper Control of Filename for Include/Require S (Security Vulnerability) allows remote attackers to trigger arbitrary code execut
Threat IntelEmergency updates in PHP 8.5, 8.4, 8.3, and 8.2 fix the 'PHP2Shell' dual memory corruption flaws (CVE-2026-109618 and CVE-2026-109619), exposing servers to pre-execution code execution.
Threat IntelA critical security flaw in yii2-starter-kit exposes the Gii code generator and debug modules to all remote IP addresses by default, allowing unauthenticated RCE.
CMS SecurityWordPress releases emergency update 7.1.2 to patch critical path traversal flaw CVE-2026-87902 in get_page_template() weaponized in active web attacks.