CYBERSECURITYTRACKER
Permanent story citation

Week in review: PHP vulnerabilities patched, exploited Palo Alto GlobalProtect VPN flaw

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 11255

As cited

Copy frozen at (site build).

vulnerabilities

Week in review: PHP vulnerabilities patched, exploited Palo Alto GlobalProtect VPN flaw

PHP released critical security patches on October 21, 2026, addressing two vulnerabilities each rated 9.2 under CVSS v4.0. The same week saw exploitation of a Palo Alto GlobalProtect virtual private network (VPN) flaw in active attacks.

Why it matters: PHP users must prioritize patching these critical flaws immediately; organizations using Palo Alto GlobalProtect VPN should assess whether their instances have been compromised by the exploited vulnerability.

VendorsPalo Alto Networks
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary

Open in glossary