Apache mod_php
AssessTools
An Apache module for running PHP code inside the web server process.
Why it's here
Placed in Assess: 2 article(s) of evidence from 2 source(s), led by security coverage, with 2 in the last 30 days. Confidence 37%.
Evidence (2)
- 10Simon Willison·10/21/2026securityPHP ships urgent security fixes for two critical RCE flaws
PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35 were released to fix two critical vulnerabilities that could let an unauthenticated attacker execute code on affected servers under certain conditions. The PHP Foundation said the issues exposed structural weaknesses in its security process and outlined recent changes to strengthen auditing, decision-making, and staffing for security work.
- 8Hacker News·10/21/2026securityPHP session.upload_progress cross-request UAF vulnerability
A Hacker News post reports corrected findings for two PHP issues in the session.upload_progress path. The earlier cached-pointer chain is described as non-exploitable, while the real issue is a cross-request use-after-free in PHP's serialization state that was ASAN-confirmed and rated medium severity, affecting prefork-style deployments.