In this hotfix for Quarterly Release 26.9.1, we have addressed the PHP security vulnerabilities.
New functions and enhancements
Unfortunately, no new features are delivered in this release.
Bug fixes and improvements
Critical ID 20763: Security vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619)
On 2026-10-21, security vulnerabilities were discovered in PHP. We have patched these vulnerabilities. For more information about the vulnerabilities, the measures taken, and next steps, please see Knowledge Base article no. 2727444676 in the edoc Docs Center.