On the evening of October 19, 2026 it was announced a critical vulnerability in all versions of PHP from version 5 to the latest version (8.5). This ranked a 9.2 on the severity meter so in layman’s terms “nuclear”. The PHP foundation announced an unprecedented immediate patch release for 10AM on October 21st.
WMD immediately prepped all servers for the patch release and applied the patch as soon as it was made available. With a few exceptions who have all been notified, all servers have been patched.
Our standard practices are to apply any updates to servers each night which ran as expected. However, because this release came after those updates were run we made the decision to manually patch the servers rather than waiting for the overnight routines to run.
We will continue to keep abreast of issue concerning the security of our servers and will take proactive measures to ensure they are safe and protected.
Photo by Vladyslav Cherkasenko on Unsplash