ACT NOWExploited vulnerability
PHP Group PHP
PHP Memory Corruption Vulnerability
What's happening and what to do
Attackers can run their own code on the server without logging in, due to a memory bug in PHP, and this flaw is being actively exploited. PHP Group PHP. Apply the vendor's update now and check for signs of compromise.
AI summary of the sources on this page. Regenerated when a source changes.
Signals over time
- 2026-10-26Added to CISA's Known Exploited Vulnerabilities catalog.
- 2026-10-29Federal patch deadline for US agencies.
- 2026-11-03 21:55First seen here.
Source text
PHP contains an out-of-memory corruption vulnerability that allows for unauthenticated remote code execution.