According to the National Information Security Vulnerability Sharing Platform, on October 21, 2026, the National Information Security Vulnerability Sharing Platform included a PHP remote code execution vulnerability. Unauthenticated remote attackers can construct malicious HTTP requests to trigger memory errors, and implement denial-of-service attacks, sensitive data theft, and remote code execution on target servers under specific conditions. Currently, technical details and PoC of the vulnerability have been widely disseminated, and CNVD advises affected users to upgrade to the latest version immediately. CNVD's overall rating for this vulnerability is “High Risk.”

Disclaimer:Webull uses external vendor Google Translation Service for news translations where we endeavour to ensure these are correct, however, we recommend that you please double-check this information accordingly. Webull is not responsible for translation errors or issues.