Does your website need the PHP security update?

October 2026 PHP security update

Check your website

Enter your website address. We'll check public headers, platform clues, and robots.txt for signs your site may need the PHP update.

Read our PHP security update post for the risks, affected versions, and how we can help.

A public check can offer clues, but cannot certify that every part of your website is patched.

PHP released fixes on October 21, 2026 for CVE-2026-109618 and CVE-2026-109619. The fixed releases are PHP 8.2.35, 8.3.36, 8.4.27, and 8.5.12, or later releases in those branches. Read the official PHP advisory.