PHP SECURITY / 21 OCTOBER 2026
Check your website.
Know your next step.
Check a website’s reported PHP version against two critical security vulnerabilities. Get clear evidence and a practical next step.
01
Start a check
Passive checkCHECK RESULT
- PHP version
- Upstream fix level
- Checked at
View evidence and check limits
THE UPSTREAM FIXES
Four branches. One action: update.
Minimum fixed releases for these two CVEs.
Vendor backports need separate confirmation.
| PHP branch | Fixed from |
|---|---|
| 8.2 | 8.2.35 |
| 8.3 | 8.3.36 |
| 8.4 | 8.4.27 |
| 8.5 | 8.5.12 |
No version exposed? That’s common. Check your hosting panel or ask your host for the active PHP package and confirmation that both CVEs are fixed. A hidden version is an inconclusive result.