PHP 8.5.12 Update - Critical remote code execution vulnerabilities

Ben S 25 Reputation points
2026-10-21T14:22:45.2433333+00:00

PHP 8.5.12 was released on 21 October 2026 to fix two critical remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619).

My Azure App Service is configured to use the Latest platform release channel, but it is still running PHP 8.5.11.

Will Microsoft automatically roll out the patched PHP version, and is there anything I can do to obtain the update sooner, or do I need to wait for Microsoft's rollout?

Thanks.

Azure App Service
Azure App Service

Azure App Service is a service used to create and deploy scalable, mission-critical web apps.


1 answer

Sort by: Most helpful
  1. Mats van der Pol 15 Reputation points
    2026-10-21T15:32:04.9733333+00:00

    Was this answer helpful?

    4 people found this answer helpful.
    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.