WHMCS Services Forum
Upcoming Critical PHP Security Release - Printable Version

+- WHMCS Services Forum (https://forum.whmcsservices.net)
+-- Forum: The Latest from WHMCS Services (https://forum.whmcsservices.net/forumdisplay.php?fid=1)
+--- Forum: News & Announcements (https://forum.whmcsservices.net/forumdisplay.php?fid=2)
+--- Thread: Upcoming Critical PHP Security Release (/showthread.php?tid=655)

Upcoming Critical PHP Security Release - whmcsservices - 10-21-2026

We want to inform you of an upcoming PHP security release that addresses two critical vulnerabilities (both rated CVSS v4.0 9.2, Critical).

The release is scheduled for Wednesday, 21 October 2026 at 14:00 UTC. We encourage all PHP users to prepare now so you can update as soon as it is available.

Apply a Temporary PHP Configuration Precaution

As a temporary precaution, consider disabling PHP’s session upload progress feature by setting the following directive in your php.ini file:

PHP Code:
session.upload_progress.enabled = 0 session.use_only_cookies = 1
Depending on your server configuration, you may need to reload or restart the relevant PHP service for the change to take effect. Verify that the setting has been applied successfully.

Official Resources
PHP Security Release Announcement
PHP Official Website
WHMCS System Requirements