#PHP vulnerability announcement (and exploit details) out - https://www.php.net/archive/2026.php#2026-10-21-5

I'm guessing a lot of vendors will release their patched software at 14:00 UTC when the announcement was originally expected.