AL26-026 - Critical vulnerabilities impacting PHP - CVE-2026-109618 and CVE-2026-109619

Is Scriptcase safe with this new vulnerabilities
Is upgrading PHP to 8.2.35 enough to protect our customers
PHP

2 Likes

Yes version 8.2.35 has been deployed with these fixes. (version 8.2.35, 8.3.36, 8.4.27 en 8.5.12 according to php.net)

Security becomes more and more a issue.
Expected that also scriptcase would have informed us.

1 Like

Hello everyone,

We are aware of the vulnerabilities and the security fixes released by PHP. Our team is already working on making new Scriptcase installers available with PHP 8.2.35 .

PHP 8.2.35 includes the security fixes for both vulnerabilities. Since Scriptcase currently supports PHP up to version 8.2, we recommend that all customers update their environments to PHP 8.2.35 or a later security release within the 8.2 series .

We are also working on expanding Scriptcase compatibility with newer PHP versions.

Customers using PHP 8.1 or earlier versions should migrate to PHP 8.2.35 as soon as possible.

To assist with this process, we have prepared a dedicated page with migration instructions and free assistance from our support team :

:point_right: PHP 8.2 Migration – Instructions and Support

We strongly recommend updating both the Scriptcase development environment and the production servers hosting your applications.

For more technical details, please refer to the official PHP security announcement:

Best regards,
Scriptcase Support Team

1 Like

Hi Alvaro,
Can you provide some timeline when is scriptcase will be certify to run on php ver 8.5 as per your reply in the forum? As you are aware that php ver 8.2 is coming to end of life by 31st Dec 2026.

1 Like

To update the development environment, do we necessarily need to wait for a new ScriptCase version to be published or can we manually udpate PHP in …/components/php/ ?