I don't think this #PHP issue is related, though I might be wrong. The main issue here seems to be that there are loads of apps using older versions of PHP, which won't be patched because they've passed end of life. And remote code execution is a pretty bad vulnerability.
⚠️ We have been informed by CERT of an issue affecting PHP: https://cert.europa.eu/publications/security-advisories/2026-018 https://www.php.net/archive/2026.php#2026-10-20-1 This would affect all online PHP servers and operations including Nextcloud as well as WordPress and othe
MastodonNextcloud 📱☁️💻 (@[email protected])⚠️ We have been informed by CERT of an issue affecting PHP: https://cert.europa.eu/publications/security-advisories/2026-018 https://www.php.net/archive/2026.php#2026-10-20-1 This would affect all online PHP servers and operations including Nextcloud as well as WordPress and other popular services. The CERT recommendation is to turn off servers running PHP based applications until updates to P