Critical PHP vulnerabilities (PHP2Shell): update your PHP installation now

[shijan]

Not sure if this directly affect PhotoLine website or forum, but here is a global warning about some critical PHP vulnerabilities found few days ago:
https://www.phpbb.com/community/viewtop ... &t=2676283

Two critical vulnerabilities in PHP itself, known together as PHP2Shell, allow unauthenticated remote code execution on any server that runs PHP. The flaws are in the PHP interpreter, the software your web server uses to run phpBB and every other PHP application. phpBB's own code is not affected, there is no phpBB security release for this, and updating phpBB will not help. The fix has to be applied to PHP on the server.

Because every phpBB board runs on PHP, every board is exposed until the server's PHP is updated. The same applies to WordPress, Drupal, Laravel and every other PHP application on the same server.

The PHP team released fixes today, 21 October 2026, in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. See the PHP security advisory for the full details (CVE-2026-109618 and CVE-2026-109619).