@fullbytedeveloper: Security alert: if your site runs on PHP (WordPress, Laravel) on your own server or VPS, patch tonight. PHP fixed two critical bugs today (php2shell, CVE-2026-109618 and CVE-2026-109619, CVSS 9.2). They can allow unauthenticated remote code execution. The PHP team rates Apache mod_php as highest risk, and FPM, CGI, FrankenPHP and LiteSpeed are affected too. 1. Check: php -v (and phpinfo() for the web server). Fixed: 8.5.12, 8.4.27, 8.3.36, 8.2.35 or newer. 2. Distro packages: version numbers differ, so compare apt list --installed 'php*' or rpm -qa 'php*' with your distro's security notice. 3. Find your setup: apache2ctl -M | grep -E 'php|proxy_fcgi' 4. Update: sudo apt update && sudo apt upgrade (or sudo dnf upgrade 'php*') 5. Restart PHP-FPM and Apache so the fix loads. On Docker, pull the fixed tag and rebuild. Comment PATCH and I'll DM you the full checklist. Official advisory: https://www.php.net/archive/2026.php #php #security #webdev #devops #linux

fullbytedeveloper

Open In TikTok:

Region: NL

Wednesday 21 October 2026 19:43:52 GMT