# Critical PHP security release **URL:** \ **Category:** Questions\ **Created:** [October 21, 2026, 10:28am UTC](https://community.kinsta.com/t/critical-php-security-release/8314 "2026-10-21T10:28:50Z")\ **Posts on this page:** 10\ **Page:** 2
**Author:** ![nielsinthecloud](https://sea2.discourse-cdn.com/flex020/user_avatar/community.kinsta.com/nielsinthecloud/32/5842_2.png) [@nielsinthecloud](https://community.kinsta.com/u/nielsinthecloud)\ **Post date:** [October 21, 2026, 4:35pm UTC](https://community.kinsta.com/t/critical-php-security-release/8314/21 "2026-10-21T16:35:04Z")
![Screenshot 2026-10-21 at 6.33.46 PM](https://us1.discourse-cdn.com/flex020/uploads/kinsta/original/2X/7/7199023e16f6369d04365855b3321969f8667b04.jpeg) ---
**Author:** ![joshdprts](https://sea2.discourse-cdn.com/flex020/user_avatar/community.kinsta.com/joshdprts/32/5835_2.png) [@joshdprts](https://community.kinsta.com/u/joshdprts)\ **Post date:** [October 21, 2026, 4:35pm UTC](https://community.kinsta.com/t/critical-php-security-release/8314/22 "2026-10-21T16:35:43Z")
Super useful info, thank you for relaying it! Edit: Seems legit. Went through 8.2/3/4 not seeing patched versions, going to 8.5 got the patched version right away. ---
**Author:** ![halshak](https://sea2.discourse-cdn.com/flex020/user_avatar/community.kinsta.com/halshak/32/2751_2.png) [@halshak](https://community.kinsta.com/u/halshak)\ **Post date:** [October 21, 2026, 4:36pm UTC](https://community.kinsta.com/t/critical-php-security-release/8314/23 "2026-10-21T16:36:11Z")
I’m seeing 8.3.35 instead of 8.3.22, but the patch is 8.3.36… ---
**Author:** ![suderman](https://sea2.discourse-cdn.com/flex020/user_avatar/community.kinsta.com/suderman/32/5845_2.png) [@suderman](https://community.kinsta.com/u/suderman)\ **Post date:** [October 21, 2026, 6:17pm UTC](https://community.kinsta.com/t/critical-php-security-release/8314/24 "2026-10-21T18:17:18Z")
Still waiting for 8.3.36. Most our agency sites are on 8.3. ---
**Author:** ![QuasarCR](https://sea2.discourse-cdn.com/flex020/user_avatar/community.kinsta.com/quasarcr/32/5847_2.png) [@QuasarCR](https://community.kinsta.com/u/QuasarCR)\ **Post date:** [October 21, 2026, 6:22pm UTC](https://community.kinsta.com/t/critical-php-security-release/8314/25 "2026-10-21T18:22:29Z")
Upgrading to 8.5 is not a good option considering most of plugins don’t even report compatibility with that PHP version. ---
**Author:** ![Aakash\_Verma](https://sea2.discourse-cdn.com/flex020/user_avatar/community.kinsta.com/aakash_verma/32/5848_2.png) [@Aakash\_Verma](https://community.kinsta.com/u/Aakash_Verma)\ **Post date:** [October 21, 2026, 6:56pm UTC](https://community.kinsta.com/t/critical-php-security-release/8314/26 "2026-10-21T18:56:52Z")
I am also seeing 8.3.35 but the patch is in 8.3.36. Earlier it was showing 8.3.26 which was released on Sept 2025 and Kinsta haven’t updated patch version after that. ---
**Author:** ![Jeremy\_Flint](https://sea2.discourse-cdn.com/flex020/user_avatar/community.kinsta.com/jeremy_flint/32/4842_2.png) [@Jeremy\_Flint](https://community.kinsta.com/u/Jeremy_Flint)\ **Post date:** [October 21, 2026, 7:44pm UTC](https://community.kinsta.com/t/critical-php-security-release/8314/27 "2026-10-21T19:44:48Z")
@**[VladimirM](https://community.kinsta.com/u/vladimirm)** When can we expect PHP 8.2./3/4 to get patches applied? ---
**Author:** ![Daniel\_J](https://avatars.discourse-cdn.com/v4/letter/d/919ad9/32.png) [@Daniel\_J](https://community.kinsta.com/u/Daniel_J)\ **Post date:** [October 21, 2026, 7:52pm UTC](https://community.kinsta.com/t/critical-php-security-release/8314/28 "2026-10-21T19:52:46Z")
8.3.36 arrived at one of my sites now, a few mins ago. ---
**Author:** ![Jeremy\_Flint](https://sea2.discourse-cdn.com/flex020/user_avatar/community.kinsta.com/jeremy_flint/32/4842_2.png) [@Jeremy\_Flint](https://community.kinsta.com/u/Jeremy_Flint)\ **Post date:** [October 21, 2026, 8:26pm UTC](https://community.kinsta.com/t/critical-php-security-release/8314/29 "2026-10-21T20:26:24Z")
Yes, I am seeing 8.3.36 as well. Still not seeing updates for 8.2.34 ---
**Author:** ![Adrian\_L](https://sea2.discourse-cdn.com/flex020/user_avatar/community.kinsta.com/adrian_l/32/2810_2.png) [@Adrian\_L](https://community.kinsta.com/u/Adrian_L)\ **Post date:** [October 21, 2026, 11:16pm UTC](https://community.kinsta.com/t/critical-php-security-release/8314/30 "2026-10-21T23:16:59Z")
Hi everyone, We have created a status page specifically for this critical PHP security release, where you can subscribe to receive updates. You can find the status page here: [Kinsta Status - PHP Security Vulnerability Update](https://status.kinsta.com/incidents/c0c6xl1ghpb2) We apologize for the inconvenience and appreciate your understanding as we work to secure all available PHP versions and fully address this critical PHP security vulnerability incident. [Previous page](https://community.kinsta.com/t/critical-php-security-release/8314.md?page=1)