PHP 8.6.0 RC4 available for testing
Unrated · fetched 2026-10-23
The PHP team is pleased to announce the third release candidate of PHP 8.6.0, RC4. This continues the PHP 8.6 release cycle, whose rough outline is specified in the PHP Wiki . Source downloads of PHP 8.6.0 RC4 are available on the download page . Please carefully test this version and report any issues found in the GitHub Issues . This version also contains the fixes for two critical vulnerabilities that can allow unauthenticated remote code execution. Everyone running earlier builds of PHP 8.6.0 is strongly encouraged to update immediately.
Remediation
Update PHP to the fixed release for your branch (8.2.35, 8.3.36, 8.4.27, 8.5.12). Branches below 8.2 have no fixed release — upgrade the branch or take the site offline.
Affected PHP branches
See the source advisory.
Source: PHP.net News · retrieved 2026-10-23T22:20:15-04:00 · https://www.php.net/index.php#2026-10-21-6