---
id: 20261022-T0-03
title: "PHP 8.x全线紧急更新，修复两个远程代码执行漏洞且已有利用"
title_en: "PHP 8.x Emergency Release Patches Two RCE Flaws With Active Exploits"
url: https://ai.daily.yangsir.net/daily/20261022-T0-03
issue_date: 2026-10-22
publish_date: 2026-10-21T18:41:53.000Z
source_name: "Simon Willison"
source_url: https://simonwillison.net/2026/Oct/21/php-security-release/
---

# PHP 8.x全线紧急更新，修复两个远程代码执行漏洞且已有利用

PHP发布覆盖整个8.x系列的安全更新，修复两个远程代码执行漏洞。Simon Willison提醒，相关利用代码从昨晚起已在流通，任何运行PHP的站点都应立即升级。远程代码执行意味着攻击者可在服务器上执行任意命令，风险等级最高。运行PHP 8.x的团队应优先安排升级，并检查日志确认是否已被尝试利用。

## English Version

**PHP 8.x Emergency Release Patches Two RCE Flaws With Active Exploits**

PHP has shipped a security release across the entire 8.x line fixing two remote code execution holes. Simon Willison warns that exploits have been circulating since last night, making the upgrade urgent for anyone running PHP. RCE flaws allow attackers to execute arbitrary commands on a server, putting them at the top of the risk scale. Teams on PHP 8.x should prioritize patching and check logs for exploitation attempts.

---

**来源**：[Simon Willison](https://simonwillison.net/2026/Oct/21/php-security-release/)

**详情页**：https://ai.daily.yangsir.net/daily/20261022-T0-03

---

*智语观潮 · Daily — https://ai.daily.yangsir.net/llms.txt*