Latest updates for Php-Fpm

Fresh curated links around PHP-FPM are collected here so marketers can spot useful updates and turn timely ideas into posts faster.

Recent items include:

  • Не DDoS, а баг в OPcache: воркеры PHP-FPM по 600 МБ на сервере с 5 500 сайтами WordPress
  • PHP2Shell: две RCE в ядре PHP без авторизации. Кто уязвим и как проверить сервер за минуту
  • PHP2Shell: Turning a Session Upload-Progress UAF into Unauthenticated RCE (CVE-2026-109618 / CVE-2026-109619)

Post angles to try

Share the most useful takeaway for your audience.
Turn one article into a quick practical checklist.
Ask your audience how this shift affects their work.
Turn angles into scheduled posts

Fresh articles and ideas

Recent curated links from global sources. Generate one free draft from any story, then use SocialBu to schedule and refine your content calendar.

habr.com /1 week ago

Не DDoS, а баг в OPcache: воркеры PHP-FPM по 600 МБ на сервере с 5 500 сайтами WordPress

Клиент написал: сайты лежат, похоже на DDoS. На сервере около 5 500 сайтов WordPress, nginx, PHP-FPM 8.4, MariaDB, 125 ГБ памяти, Debian 13. Я нашёл сканер, закрыл его в nginx, сай...

Read source
habr.com /3 days ago

PHP2Shell: две RCE в ядре PHP без авторизации. Кто уязвим и как проверить сервер за минуту

21 октября PHP выпустил экстренные версии 8.2.35, 8.3.36, 8.4.27 и 8.5.12. Они закрывают две критические RCE без авторизации (CVSS 9.2), одна из которых срабатывает ещё до кода ваш...

Read source
dev.to /3 days ago

PHP2Shell: Turning a Session Upload-Progress UAF into Unauthenticated RCE (CVE-2026-109618 / CVE-2026-109619)

I published PHP2Shell, a proof-of-concept for two critical PHP vulnerabilities — CVE-2026-109618 and CVE-2026-109619 — that enable a heap use-after-free in session.upload_progress...

Read source
dev.to /1 hour ago

PHP 8.5.12 RCE Patch: The Checklist I Run on Every Server

I was halfway through a coffee yesterday evening when the PHP security advisory landed in my feed, and the coffee did not survive the next ten minutes. Two critical remote code exe...

Read source
habr.com /2 days ago

Выживаем при PHP2Shell (CVE-2026-109618 / CVE-2026-109619) на легаси‑стеке: Varnish + Docker + Apache mod_php (PHP 5.6)

21 октября 2026 года мир PHP вздрогнул от анонса двух критических RCE-уязвимостей (CVSS 9.2), получивших общее имя PHP2Shell (CVE-2026-109618 и CVE-2026-109619). Опасность этих бре...

Read source
habr.com /3 days ago

Две критические RCE в PHP: что обновлять и как проверить за минуту

21 октября PHP выпустил внеплановые релизы 8.5.12, 8.4.27, 8.3.36 и 8.2.35: они закрывают две критические уязвимости (CVSS 4.0 — 9.2), допускающие выполнение кода без аутентификаци...

Read source
wetcom.com /1 day ago

PHP2Shell: cómo frenar las vulnerabilidades críticas de PHP sin apagar tus aplicaciones

<p class="wp-block-paragraph">El 22 de octubre se publicaron dos vulnerabilidades críticas en PHP, conocidas en conjunto como <strong>PHP2Shell</strong>...

Read source
omega8.cc /2 days ago

Omega8.cc: The Ninety-Minute Recall

On Tuesday PHP's security team gave notice of two critical bugs, both scored 9.2, with the fixes due on Wednesday at 14:00 UTC. By Wednesday morning every BOA server, PHP 5.6 to 8....

Read source
tag1.com /3 days ago

Tag1 Insights: PHP2Shell: What PHP Site Owners Should Do Today

On 21 October 2026, as scheduled, the PHP project released PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. They fix two vulnerabilities, CVE-2026-109618 and CVE-2026-109619, that can allow...

Read source
sourcetrail.com /1 day ago

Critical PHP php2shell flaws force urgent patching and WAF rollouts

PHP 5.4+ carries critical php2shell memory flaws, enabling unauthenticated RCE and data exposure. Patch PHP now and keep WAF rules active. The post Critical PHP php2shell flaws for...

Read source
phoronix.com /3 days ago

PHP Updates Released For Two Critical Code Execution Vulnerabilities

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 were just released to fix two critical vulnerabilities that can allow for unauthenticated remote code execution. Server administrators are adv...

Read source
omega8.cc /1 week ago

Omega8.cc: One Garage, Many Engines

In March 2012 a developer asked us for a PHP version per platform, a per-site override on top, and a way to tell Drush which PHP to use, and I turned the Provision half down myself...

Read source
thehackernews.com /3 days ago

PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge

PHP has released emergency updates that fix two critical flaws in the language itself, letting an attacker without an account run code on a web server. The fixes are in PHP 8.5.12,...

Read source
dev.to /3 days ago

Critical PHP Security Update: Two Unauthenticated RCE Vulnerabilities Fixed

On October 21, 2026, the PHP team released security updates for PHP 8.5, 8.4, 8.3, and 8.2. The updates fix two critical vulnerabilities that can lead to remote code execution (RC...

Read source
habr.com /2 weeks ago

Один SoapFault — и сборщик мусора PHP выключен навсегда. История одной утечки памяти

Консьюмер очереди на PHP, который раньше раз в пять-шесть часов падал по OOMKilled. Сообщения при этом не терялись: Kubernetes поднимал под, и консьюмер дочитывал очередь, так что...

Read source
pkguild.com /2 days ago

PHP2Shell (CVE-2026-109618/19): Broadcom & VMware Impact & Mitigation

💥 The Situation <p>On October 21, 2026, the PHP project released emergency patches to address two critical remote code execution</p>

Read source

Turn fresh research into a full content calendar

Use SocialBu to discover ideas, generate post drafts, and schedule them across your social channels.

Sources covering Php-Fpm

phoronix.com

Recent coverage from public sources
Public source

blogs.vmware.com

Recent coverage from public sources
Public source

dev.to

Recent coverage from public sources
Public source

feeds.feedburner.com

Recent coverage from public sources
Public source

habr.com

Recent coverage from public sources
Public source

drupal.org

Recent coverage from public sources
Public source