FYI: CVE-Embargo läuft offiziell übermorgen um 17:00h (CEST/UTC+2) ab; PHP-Nutzer sollten aber ab sofort die Augen aufhalten bzgl. Patches.
Update: "The PHP security team would like to give advance notice of an upcoming security release. It is scheduled for Wednesday, 21 October 2026 at 14:00 UTC. […] Full details, affected versions, and the fixed versions will be published with the release."
CVSS v4.0 Score: 9,2 (kritisch)