A security vulnerability has been identified in specific versions of PHP, the programming language that powers most dynamic, interactive websites. The flaw exists in the bccomp() function, a tool used to compare very large numbers. If this function processes input submitted directly by website visitors (rather than pre-vetted, trusted data), attackers could trigger a memory corruption error that interferes with how the server operates. This could allow them to disrupt your site, modify its content, or access sensitive information stored on the server.
The vulnerability only impacts PHP 8.4 releases older than version 8.4.24, and PHP 8.5 releases older than version
Source: NVD (National Vulnerability Database) — https://nvd.nist.gov/vuln/detail/CVE-2026-17544
