Security alerts
Vulnerabilities that can affect websites and businesses, explained simply: what they are, who is affected and what you should do. We only write about issues that affect a business website, with links to the official sources.
- CVE-2026-115560: new PHP vulnerability, no patch available yet
Published 23.10.2026 · Severity level : Medium
On 23 October 2026, PHP announced a new vulnerability (CVE-2026-115560) that could allow remote code execution. The patches released on 21 October do not fix it. Here is how to protect your website in the meantime. - PHP2Shell: two critical PHP vulnerabilities – update now
Published 21.10.2026 · Severity level : Critical
Two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619, “PHP2Shell”) allow remote code execution without logging in. Fixed in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. Here is how to check your website.