PHP Security Update: CPS Has You Covered
PHP released an urgent security update on October 21, 2026, to fix two critical security flaws. These flaws could allow attackers to run harmful code on a website’s server without logging in.
PHP is a programming language that powers websites behind the scenes. It processes forms, displays content, and connects to databases. Many websites rely on PHP to function, so this update is essential to keeping them secure.
CPS is working to patch and update all websites we manage to address these security issues. We’ll contact you directly if we identify any issues affecting your website or its security.
For websites managed elsewhere, contact your hosting provider or website developer to confirm that the appropriate security update has been installed. The fixes are available in PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35. Hosting providers may also supply these fixes through their own update systems.
PHP warns that temporary precautions do not fully resolve these problems. Installing the security update is essential. Read more in the official PHP security announcement.
Thank you for your patience as we work to keep your website secure.
The CPS team