A pair of new PHP flaws have web admins reeling the world over and waiting for a patch, given the severity of the flaws and the consequences of a possible breach.

PHP is one of the most popular programming languages in the world. In fact, according to the TIOBE Index , the language held the top-ranked spot in October 2026, with 19.23% of the votes. While PHP is used in virtually every kind of development, it is especially popular in website and web application development, which is also where a vulnerability can wreak the most havoc.

According to TechRadar , PHP devs issued a security advisory detailing the risks caused by the flaws, including potential remote code execution (RCE) attacks, data theft, website takeovers, and malicious redirects. The notice also served to give admins a “heads up” that a patch will be released soon.

“The PHP security team would like to give advance notice of an upcoming security release,” reads the advisory.

“It is scheduled for Wednesday, 21 October 2026 at 14:00 UTC.…