php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

What Nobody Tells Junior Devs...

Key Takeaways End-of-life software usually keeps running normally, but once upstream security fixes stop, newly discovered vulnerabilities may no longer receive an upstream patch. Upgrading off an EOL dependency is...