# PHP Fixes Critical Web Server Flaws

> PHP releases urgent patches for two high-risk vulnerabilities affecting web servers.
- Title: PHP Fixes Critical Web Server Flaws · TokenPost | Shortify
- Summary: PHP releases urgent patches for two high-risk vulnerabilities affecting web servers. PHP 8.5.12 and other versions fix critical flaws that could let…
- Keywords: php, php 8.5.12, php 8.4.27, php 8.3.36, php 8.2.35, critical vulnerabilities, web servers, apache, mod_php, crypto, finance, Fixes
- Source: TokenPost — https://tokenpost.com/news/technology/37442
- Published: 2026-10-22T04:11:19+00:00
- Read time: 1 min
- Topics: php, php 8.5.12, php 8.4.27, php 8.3.36, php 8.2.35, critical vulnerabilities, web servers, apache, mod_php, crypto, finance
## Critical PHP Flaws
PHP maintainers released fixes Oct. 21 for two critical flaws that could let attackers without credentials run code on servers handling web requests.
## Vulnerability Details
The vulnerabilities CVE-2026-109618 and CVE-2026-109619 each have a CVSS v4.0 score of 9.2 with highest risk on Apache servers using mod_php.
## Patch Releases
Patched releases include PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 for immediate security updates.
## Key takeaway

PHP 8.5.12 and other versions fix critical flaws that could let attackers run code on web servers without credentials.