php2shell: Japanese Services Pause Ahead of an Emergency PHP Patch for Two Critical Flaws
PHP will ship fixes for two critical flaws, rated CVSS 9.2, at 14:00 UTC on October 21, 2026, after details leaked. Childcare app Codmon and website builder Studio are among Japanese services that switched off first. What is known, what is not, and why pausing is a sound security decision.