← Front page

Risky Business · Wednesday, October 21, 2026

Critical CVSS 9-Plus Vulnerabilities Discovered in PHP Core

Patrick Gray and James Wilson discuss an upcoming disclosure of multiple CVSS 9-plus severity vulnerabilities in PHP core. The hosts note that given the massive prevalence of the LAMP stack, this could have a massive impact across the internet.

personPatrick GraypersonJames WilsoncompanyWordPresscompanyDrupal

The tape

2 quotes
“There is apparently a pair of CVSS, like, 9-plus bugs coming in PHP core.”
Patrick Gray
“PHP Core, when you think about how much of the internet runs on a LAMP stack, this could be like a meteor hits Earth moment.”
Patrick Gray
Heard on Risky Business — “Risky Business #856 -- 8-bit encryption, PHP megabugs and more”, published Wednesday, October 21, 2026. Heardvine summarizes and quotes with attribution and timestamps, and links to the original everywhere.
Transcribed via deepinfra · $0.01
Critical CVSS 9-Plus Vulnerabilities Discovered in PHP Core — Heardvine