PHP 2026 Security Update & CVE Fix Summary (8.2-8.6)

PHP Security Update Summary (2026) Vulnerability Overview 8.5.10 (2026-08-27): Bug-fix release 8.4.25 (2026-08-27): Bug-fix release 8.6.0 Beta 2 (2026-08-27): Pre-release; not for production use 8.6.0 Beta 1 (2026-08-13): Pre-release; not for production use 8.4.24 (2026-07-30): Security-fix release 8.3.33 (2026-07-30): Security-fix release 8.6.0 Alpha 3 (2026-07-30): Pre-release; not for production use 8.5.9 (2026-07-30): Security-fix release 8.2.33 (2026-07-30): Security-fix release 8.6.0 Alpha 2 (2026-06-16): Pre-release; not for production use 8.5.8 (2026-06-02): Security-fix release 8.4.23 (2026-06-02): Security-fix release 8.6.0 Alpha 1 (2026-06-02): Pre-release; not for production use 8.3.32 (2026-06-02): Security-fix release 8.2.32 (2026-06-02): Security-fix release 8.4.22 (2026-06-04): Bug-fix release 8.5.7 (2026-06-04): Bug-fix release 8.5.6 (2026-05-07): Security-fix release 8.2.31 (2026-05-07): Security-fix release Scope of Impact Security-fix releases (8.4.24, 8.3.33, 8.5.9, 8.2.33, 8.5.8, 8.4.23, 8.3.32, 8.2.32, 8.5.6, 8.2.31): Affect all users on the corresponding major version branch; upgrade recommended. Bug-fix releases (8.5.10, 8.4.25, 8.4.22, 8.5.7): Affect all users on the corresponding major version branch; upgrade recommended. Pre-releases (8.6.0 Alpha/Beta series): For testing only; not suitable for production environments. Remediation For security/bug-fix releases: Visit the downloads page to obtain Windows source code and binaries; see the Changelog for details of changes. For pre-releases: Visit the downloads page to obtain the source code; report issues on GitHub; see the NEWS file or UPGRADING file for upgrade notes; verify signatures via the manifest or the pre-release builds page. POC / Exploitation Code No POC or exploitation code is included in the page.

Goal Reached Thanks to every supporter — we hit 100%!

PHP 2026 Security Update & CVE Fix Summary (8.2-8.6)