[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"blog-freepik-is-now-magnific-what-it-means":3},{"success":4,"message":5,"data":6},true,"Single Blog fetched",{"blog":7,"related_blogs":33},{"id":8,"category":9,"tags":14,"title":17,"tool_link":18,"slug":19,"excerpt":20,"content":21,"featured_image":22,"status":23,"published_at":24,"seo_meta":18,"meta_title":25,"meta_description":26,"meta_keywords":27,"views_count":28,"likes_count":29,"comments_count":29,"reading_time":30,"created_at":31,"updated_at":32},42,{"id":10,"name":11,"slug":12,"description":13},3,"Trending","trending","Trending News Available across the world",[15],{"id":10,"name":11,"slug":12,"color":16},"#dc3545","Freepik Is Now Magnific: What It Means",null,"freepik-is-now-magnific-what-it-means","Freepik is now Magnific. Learn what changed, why it rebranded, and explore its new AI tools. Also discover free tools on UIBuilderHub.com","\u003Ch2 dir=\"ltr\">Introduction\u003C\u002Fh2>\r\n\u003Cp dir=\"ltr\">Have you ever opened Freepik late at night to download a vector, icon, or mockup? Millions of designers, developers, and content creators have done the same.\u003C\u002Fp>\r\n\u003Cp dir=\"ltr\">But on April 28, 2026, something big changed.\u003C\u002Fp>\r\n\u003Cp dir=\"ltr\">Freepik officially rebranded to Magnific.\u003C\u002Fp>\r\n\u003Cp dir=\"ltr\">This is not just a new name. It marks a major shift from a traditional stock asset website to a complete AI-powered creative platform.\u003C\u002Fp>\r\n\u003Cp dir=\"ltr\">👉 You can explore the platform here:\u003Cbr>\u003Ca href=\"https:\u002F\u002Fwww.freepik.com\u002F\">https:\u002F\u002Fwww.freepik.com\u003C\u002Fa> (now redirected to Magnific)\u003C\u002Fp>\r\n\u003Cp dir=\"ltr\">According to recent industry reports, this move reflects a wider trend: creative tools are becoming all-in-one AI platforms instead of separate apps.\u003C\u002Fp>\r\n\u003Cp dir=\"ltr\">In this blog, you will learn what changed, why it matters, and what it means for you.\u003C\u002Fp>\r\n\u003Cp>\u003Cspan style=\"font-size: 18pt;\">\u003Cstrong>What Is Magnific — and What Was Freepik?\u003C\u002Fstrong>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp dir=\"ltr\">Freepik started in 2010 in Spain as a simple search tool for design resources. Over time, it became one of the most widely used platforms for:\u003C\u002Fp>\r\n\u003Cul>\r\n\u003Cli dir=\"ltr\" aria-level=\"1\">\r\n\u003Cp dir=\"ltr\" role=\"presentation\">Vectors\u003C\u002Fp>\r\n\u003C\u002Fli>\r\n\u003Cli dir=\"ltr\" aria-level=\"1\">\r\n\u003Cp dir=\"ltr\" role=\"presentation\">Icons\u003C\u002Fp>\r\n\u003C\u002Fli>\r\n\u003Cli dir=\"ltr\" aria-level=\"1\">\r\n\u003Cp dir=\"ltr\" role=\"presentation\">PSD files\u003C\u002Fp>\r\n\u003C\u002Fli>\r\n\u003Cli dir=\"ltr\" aria-level=\"1\">\r\n\u003Cp dir=\"ltr\" role=\"presentation\">Stock photos\u003C\u002Fp>\r\n\u003C\u002Fli>\r\n\u003Cli dir=\"ltr\" aria-level=\"1\">\r\n\u003Cp dir=\"ltr\" role=\"presentation\">Templates\u003C\u002Fp>\r\n\u003C\u002Fli>\r\n\u003C\u002Ful>\r\n\u003Cp dir=\"ltr\">It attracted millions of users worldwide every month.\u003C\u002Fp>\r\n\u003Cp dir=\"ltr\">In 2024, Freepik acquired Magnific AI, a tool that quickly became popular for improving and upscaling images using artificial intelligence.\u003C\u002Fp>\r\n\u003Cp dir=\"ltr\">By 2026, the company combined its tools, AI features, and asset library under one unified brand: Magnific.\u003C\u002Fp>\r\n\u003Cp>\u003Cspan style=\"font-size: 18pt;\">\u003Cstrong>The Numbers Behind the Rebrand\u003C\u002Fstrong>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp dir=\"ltr\">The growth of Magnific is impressive, especially because it is a bootstrapped company.\u003C\u002Fp>\r\n\u003Cp dir=\"ltr\">Here are some key highlights:\u003C\u002Fp>\r\n\u003Cul>\r\n\u003Cli dir=\"ltr\" aria-level=\"1\">\r\n\u003Cp dir=\"ltr\" role=\"presentation\">$200M+ annual revenue (ARR)\u003C\u002Fp>\r\n\u003C\u002Fli>\r\n\u003Cli dir=\"ltr\" aria-level=\"1\">\r\n\u003Cp dir=\"ltr\" role=\"presentation\">1M+ paying subscribers\u003C\u002Fp>\r\n\u003C\u002Fli>\r\n\u003Cli dir=\"ltr\" aria-level=\"1\">\r\n\u003Cp dir=\"ltr\" role=\"presentation\">Hundreds of enterprise teams\u003C\u002Fp>\r\n\u003C\u002Fli>\r\n\u003Cli dir=\"ltr\" aria-level=\"1\">\r\n\u003Cp dir=\"ltr\" role=\"presentation\">Millions of AI-generated assets created regularly\u003C\u002Fp>\r\n\u003C\u002Fli>\r\n\u003C\u002Ful>\r\n\u003Cp dir=\"ltr\">Even more interesting: the company has not taken venture capital funding.\u003C\u002Fp>\r\n\u003Cp dir=\"ltr\">Major brands using the platform include:\u003C\u002Fp>\r\n\u003Cul>\r\n\u003Cli dir=\"ltr\" aria-level=\"1\">\r\n\u003Cp dir=\"ltr\" role=\"presentation\">BBC\u003C\u002Fp>\r\n\u003C\u002Fli>\r\n\u003Cli dir=\"ltr\" aria-level=\"1\">\r\n\u003Cp dir=\"ltr\" role=\"presentation\">Amazon Prime Video\u003C\u002Fp>\r\n\u003C\u002Fli>\r\n\u003Cli dir=\"ltr\" aria-level=\"1\">\r\n\u003Cp dir=\"ltr\" role=\"presentation\">Puma\u003C\u002Fp>\r\n\u003C\u002Fli>\r\n\u003Cli dir=\"ltr\" aria-level=\"1\">\r\n\u003Cp dir=\"ltr\" role=\"presentation\">Guess\u003C\u002Fp>\r\n\u003C\u002Fli>\r\n\u003C\u002Ful>\r\n\u003Cp dir=\"ltr\">This shows that Magnific is not just for beginners—it is also trusted by professionals and large organizations.\u003C\u002Fp>\r\n\u003Cp>\u003Cspan style=\"font-size: 18pt;\">\u003Cstrong>What Does Magnific Do Now?\u003C\u002Fstrong>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp dir=\"ltr\">Magnific is no longer just a stock library. It is a complete creative ecosystem that supports the full workflow.\u003C\u002Fp>\r\n\u003Ch3 dir=\"ltr\">🖼️ Image Generation\u003C\u002Fh3>\r\n\u003Cp dir=\"ltr\">Create high-quality visuals using AI tools.\u003C\u002Fp>\r\n\u003Ch3 dir=\"ltr\">🎬 Video Creation\u003C\u002Fh3>\r\n\u003Cp dir=\"ltr\">Generate videos from text and creative prompts.\u003C\u002Fp>\r\n\u003Ch3 dir=\"ltr\">⬆️ AI Upscaling\u003C\u002Fh3>\r\n\u003Cp dir=\"ltr\">Enhance image quality and increase resolution.\u003C\u002Fp>\r\n\u003Ch3 dir=\"ltr\">🎵 Audio Tools\u003C\u002Fh3>\r\n\u003Cp dir=\"ltr\">Create voiceovers, music, and sound effects.\u003C\u002Fp>\r\n\u003Ch3 dir=\"ltr\">🧊 3D Tools\u003C\u002Fh3>\r\n\u003Cp dir=\"ltr\">Build simple 3D visuals from images.\u003C\u002Fp>\r\n\u003Ch3 dir=\"ltr\">🤝 Team Collaboration\u003C\u002Fh3>\r\n\u003Cp dir=\"ltr\">Work together in shared creative spaces.\u003C\u002Fp>\r\n\u003Ch3 dir=\"ltr\">📦 Asset Library\u003C\u002Fh3>\r\n\u003Cp dir=\"ltr\">Access a massive collection of design resources from the original Freepik platform.\u003C\u002Fp>\r\n\u003Cp dir=\"ltr\">👉 Want to try it yourself? Visit:\u003Cbr>\u003Ca href=\"https:\u002F\u002Fwww.freepik.com\u002F\">https:\u002F\u002Fwww.freepik.com\u003C\u002Fa>\u003C\u002Fp>\r\n\u003Cp dir=\"ltr\">The biggest advantage is flexibility. Instead of being locked into one AI system, users can work with different tools in one place.\u003C\u002Fp>\r\n\u003Cp>\u003Cspan style=\"font-size: 18pt;\">\u003Cstrong>Why Did They Change the Name?\u003C\u002Fstrong>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp dir=\"ltr\">The old branding created confusion.\u003C\u002Fp>\r\n\u003Cul>\r\n\u003Cli dir=\"ltr\" aria-level=\"1\">\r\n\u003Cp dir=\"ltr\" role=\"presentation\">Freepik was known for stock assets\u003C\u002Fp>\r\n\u003C\u002Fli>\r\n\u003Cli dir=\"ltr\" aria-level=\"1\">\r\n\u003Cp dir=\"ltr\" role=\"presentation\">Magnific AI was known for image upscaling\u003C\u002Fp>\r\n\u003C\u002Fli>\r\n\u003C\u002Ful>\r\n\u003Cp dir=\"ltr\">But behind the scenes, it was already one unified company building a much larger system.\u003C\u002Fp>\r\n\u003Cp dir=\"ltr\">Rebranding to Magnific makes this clear:\u003Cbr>it is now a single platform for all creative needs.\u003C\u002Fp>\r\n\u003Cp dir=\"ltr\">For existing users, nothing breaks. Accounts, files, and subscriptions remain the same.\u003C\u002Fp>\r\n\u003Ch2 dir=\"ltr\">Who Is Using Magnific?\u003C\u002Fh2>\r\n\u003Cp dir=\"ltr\">One of the most important insights:\u003C\u002Fp>\r\n\u003Cp dir=\"ltr\">About 70%+ of new users are beginners.\u003C\u002Fp>\r\n\u003Cp dir=\"ltr\">This means the platform is designed not just for professionals, but also for:\u003C\u002Fp>\r\n\u003Cul>\r\n\u003Cli dir=\"ltr\" aria-level=\"1\">\r\n\u003Cp dir=\"ltr\" role=\"presentation\">Students\u003C\u002Fp>\r\n\u003C\u002Fli>\r\n\u003Cli dir=\"ltr\" aria-level=\"1\">\r\n\u003Cp dir=\"ltr\" role=\"presentation\">Freelancers\u003C\u002Fp>\r\n\u003C\u002Fli>\r\n\u003Cli dir=\"ltr\" aria-level=\"1\">\r\n\u003Cp dir=\"ltr\" role=\"presentation\">Content creators\u003C\u002Fp>\r\n\u003C\u002Fli>\r\n\u003Cli dir=\"ltr\" aria-level=\"1\">\r\n\u003Cp dir=\"ltr\" role=\"presentation\">Small business owners\u003C\u002Fp>\r\n\u003C\u002Fli>\r\n\u003C\u002Ful>\r\n\u003Cp dir=\"ltr\">The goal is to make creative work easier and more accessible for everyone.\u003C\u002Fp>\r\n\u003Cp>\u003Cspan style=\"font-size: 18pt;\">\u003Cstrong>Pros and Cons\u003C\u002Fstrong>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Ch3 dir=\"ltr\">✅ Good Things\u003C\u002Fh3>\r\n\u003Cul>\r\n\u003Cli dir=\"ltr\" aria-level=\"1\">\r\n\u003Cp dir=\"ltr\" role=\"presentation\">All-in-one creative platform\u003C\u002Fp>\r\n\u003C\u002Fli>\r\n\u003Cli dir=\"ltr\" aria-level=\"1\">\r\n\u003Cp dir=\"ltr\" role=\"presentation\">Combines AI tools with asset library\u003C\u002Fp>\r\n\u003C\u002Fli>\r\n\u003Cli dir=\"ltr\" aria-level=\"1\">\r\n\u003Cp dir=\"ltr\" role=\"presentation\">Suitable for beginners and professionals\u003C\u002Fp>\r\n\u003C\u002Fli>\r\n\u003Cli dir=\"ltr\" aria-level=\"1\">\r\n\u003Cp dir=\"ltr\" role=\"presentation\">Flexible workflow with multiple tools\u003C\u002Fp>\r\n\u003C\u002Fli>\r\n\u003Cli dir=\"ltr\" aria-level=\"1\">\r\n\u003Cp dir=\"ltr\" role=\"presentation\">Independent, profitable company\u003C\u002Fp>\r\n\u003C\u002Fli>\r\n\u003C\u002Ful>\r\n\u003Ch3 dir=\"ltr\">⚠️ Things to Know\u003C\u002Fh3>\r\n\u003Cul>\r\n\u003Cli dir=\"ltr\" aria-level=\"1\">\r\n\u003Cp dir=\"ltr\" role=\"presentation\">Pricing depends on features and plans\u003C\u002Fp>\r\n\u003C\u002Fli>\r\n\u003Cli dir=\"ltr\" aria-level=\"1\">\r\n\u003Cp dir=\"ltr\" role=\"presentation\">Some advanced tools use credits\u003C\u002Fp>\r\n\u003C\u002Fli>\r\n\u003Cli dir=\"ltr\" aria-level=\"1\">\r\n\u003Cp dir=\"ltr\" role=\"presentation\">New name may take time to get used to\u003C\u002Fp>\r\n\u003C\u002Fli>\r\n\u003Cli dir=\"ltr\" aria-level=\"1\">\r\n\u003Cp dir=\"ltr\" role=\"presentation\">Strong competition in the AI tools market\u003C\u002Fp>\r\n\u003C\u002Fli>\r\n\u003C\u002Ful>\r\n\u003Ch2 dir=\"ltr\">How Magnific Compares to Other Tools\u003C\u002Fh2>\r\n\u003Cp dir=\"ltr\">Compared to Adobe, Canva, and Midjourney:\u003C\u002Fp>\r\n\u003Cul>\r\n\u003Cli dir=\"ltr\" aria-level=\"1\">\r\n\u003Cp dir=\"ltr\" role=\"presentation\">Most competitors focus on specific features\u003C\u002Fp>\r\n\u003C\u002Fli>\r\n\u003Cli dir=\"ltr\" aria-level=\"1\">\r\n\u003Cp dir=\"ltr\" role=\"presentation\">Magnific combines multiple tools in one place\u003C\u002Fp>\r\n\u003C\u002Fli>\r\n\u003Cli dir=\"ltr\" aria-level=\"1\">\r\n\u003Cp dir=\"ltr\" role=\"presentation\">It integrates AI generation with a large asset library\u003C\u002Fp>\r\n\u003C\u002Fli>\r\n\u003C\u002Ful>\r\n\u003Cp dir=\"ltr\" role=\"presentation\">👉 Note: Features may vary depending on updates and pricing plans.\u003C\u002Fp>\r\n\u003Cp>\u003Cspan style=\"font-size: 18pt;\">\u003Cstrong>Common Questions (FAQ)\u003C\u002Fstrong>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Ch3 dir=\"ltr\">Is Freepik gone?\u003C\u002Fh3>\r\n\u003Cp dir=\"ltr\">No. Only the name has changed. The platform and its content are still available under Magnific.\u003C\u002Fp>\r\n\u003Ch3 dir=\"ltr\">Is Magnific free?\u003C\u002Fh3>\r\n\u003Cp dir=\"ltr\">Magnific is a paid platform, and pricing depends on the tools and features you use.\u003C\u002Fp>\r\n\u003Ch3 dir=\"ltr\">What happened to Magnific AI?\u003C\u002Fh3>\r\n\u003Cp dir=\"ltr\">It is now part of the main Magnific platform.\u003C\u002Fp>\r\n\u003Ch3 dir=\"ltr\">Can beginners use it?\u003C\u002Fh3>\r\n\u003Cp dir=\"ltr\">Yes. A large percentage of users are beginners.\u003C\u002Fp>\r\n\u003Ch3 dir=\"ltr\">Why is this trending?\u003C\u002Fh3>\r\n\u003Cp dir=\"ltr\">Because Freepik was widely used, and this change reflects a major shift toward AI-powered creative platforms.\u003C\u002Fp>\r\n\u003Cp>\u003Cspan style=\"font-size: 18pt;\">\u003Cstrong>Conclusion\u003C\u002Fstrong>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp dir=\"ltr\">The transition from Freepik to Magnific is more than a rebrand.\u003C\u002Fp>\r\n\u003Cp dir=\"ltr\">It shows how the creative industry is evolving. Instead of using multiple tools, everything is moving toward unified platforms powered by AI.\u003C\u002Fp>\r\n\u003Cp dir=\"ltr\">Whether you are a designer, developer, or content creator, this change is worth paying attention to.\u003C\u002Fp>\r\n\u003Cp dir=\"ltr\">👉 If you are looking for free tools right now, explore \u003Ca href=\"https:\u002F\u002Fuibuilderhub.com\u002F\">uibuilderhub.com\u003C\u002Fa> — a collection of 45+ tools for PDFs, images, and file conversions, with no sign-up required.\u003C\u002Fp>","https:\u002F\u002Fadmin.uibuilderhub.com\u002Fstorage\u002Fblogs\u002Fxz9DANbYNgH8wIYn7Q8Zh3pixr5cCuWkOHPbaDe4.png","published","2026-05-02T09:45:00.000000Z","Freepik Becomes Magnific: Key Changes Explained","Freepik is now Magnific. Learn what changed, new AI features, and what it means. Plus, explore free tools on UIBuilderHub.","Freepik is now Magnific, Freepik rebrands to Magnific, Magnific AI platform, what is Magnific AI, Freepik new name 2026, Freepik Magnific update, why did Freepik change to Magnific, Freepik vs Magnific difference, AI creative tools platform,",833,0,4,"5 months ago","9 hours ago",[34],{"id":35,"title":36,"tool_link":18,"slug":37,"excerpt":38,"content":39,"featured_image":40,"status":23,"published_at":41,"seo_meta":18,"meta_title":42,"meta_description":43,"meta_keywords":44,"views_count":45,"likes_count":29,"comments_count":29,"reading_time":46,"created_at":47,"updated_at":47},46,"PHP2Shell: Critical PHP Vulnerabilities (CVE-2026-109618 and CVE-2026-109619) and How to Patch Them","php2shell-critical-php-vulnerabilities-cve-2026-109618-and-cve-2026-109619-and-how-to-patch-them","PHP has released emergency updates for two critical remote code execution flaws that affect any server running PHP to serve web pages. This guide explains what was fixed, which versions are affected, and how to check and update your server.","\u003Cp dir=\"ltr\">\u003Cem>Last updated: October 24, 2026. This issue is still developing, so confirm details on php.net before you act.\u003C\u002Fem>\u003C\u002Fp>\r\n\u003Cp dir=\"ltr\">On October 21, 2026, the PHP project released emergency security updates for two critical vulnerabilities in the PHP interpreter itself. Both are rated 9.2 out of 10 (CVSS v4.0) and can let an unauthenticated attacker run code on a server remotely. The pair is being called \u003Cstrong>PHP2Shell\u003C\u002Fstrong>. Because the flaws are in PHP, not in a plugin or a theme, WordPress sites, Laravel apps and custom PHP code are all in scope when the server runs an unpatched PHP version.\u003C\u002Fp>\r\n\u003Ch3 dir=\"ltr\" aria-level=\"4\">What happened\u003C\u002Fh3>\r\n\u003Cul dir=\"ltr\">\r\n\u003Cli>\u003Cstrong>October 20:\u003C\u002Fstrong> details leaked publicly before the planned disclosure date, and the PHP security team announced an emergency release.\u003C\u002Fli>\r\n\u003Cli>\u003Cstrong>October 21:\u003C\u002Fstrong> PHP published fixed releases and its advisories.\u003C\u002Fli>\r\n\u003Cli>Security firms have reported exploitation attempts, including some dating from before the patch. As of October 22, the US CISA had not added either CVE to its Known Exploited Vulnerabilities list.\u003C\u002Fli>\r\n\u003C\u002Ful>\r\n\u003Ch3 dir=\"ltr\" aria-level=\"4\">What the two vulnerabilities are\u003C\u002Fh3>\r\n\u003Cul dir=\"ltr\">\r\n\u003Cli>\u003Cstrong>CVE-2026-109618\u003C\u002Fstrong> is triggered when PHP runs out of memory partway through setting up a request. That leaves internal data half-built, and PHP’s cleanup code then trusts it.\u003C\u002Fli>\r\n\u003Cli>\u003Cstrong>CVE-2026-109619\u003C\u002Fstrong> involves internal state that outlives the request memory it points to, so the next request handled by the same PHP worker can act on leftover data.\u003C\u002Fli>\r\n\u003C\u002Ful>\r\n\u003Cp dir=\"ltr\">PHP considers the risk highest for Apache with \u003Ccode dir=\"ltr\">mod_php\u003C\u002Fcode>, where an attack can succeed before your application’s own code runs. Every setup that serves web requests is in scope: PHP-FPM, Apache \u003Ccode dir=\"ltr\">mod_php\u003C\u002Fcode>, \u003Ccode dir=\"ltr\">php-cgi\u003C\u002Fcode>, LiteSpeed and FrankenPHP.\u003C\u002Fp>\r\n\u003Ch3 dir=\"ltr\" aria-level=\"4\">Affected and fixed versions\u003C\u002Fh3>\r\n\u003Cdiv dir=\"ltr\">\r\n\u003Ctable>\r\n\u003Cthead>\r\n\u003Ctr>\r\n\u003Cth scope=\"col\">PHP branch\u003C\u002Fth>\r\n\u003Cth scope=\"col\">Fixed version\u003C\u002Fth>\r\n\u003Cth scope=\"col\">Notes\u003C\u002Fth>\r\n\u003C\u002Ftr>\r\n\u003C\u002Fthead>\r\n\u003Ctbody>\r\n\u003Ctr>\r\n\u003Ctd>8.5\u003C\u002Ftd>\r\n\u003Ctd>8.5.12\u003C\u002Ftd>\r\n\u003Ctd>Update to this or later\u003C\u002Ftd>\r\n\u003C\u002Ftr>\r\n\u003Ctr>\r\n\u003Ctd>8.4\u003C\u002Ftd>\r\n\u003Ctd>8.4.27\u003C\u002Ftd>\r\n\u003Ctd>Update to this or later\u003C\u002Ftd>\r\n\u003C\u002Ftr>\r\n\u003Ctr>\r\n\u003Ctd>8.3\u003C\u002Ftd>\r\n\u003Ctd>8.3.36\u003C\u002Ftd>\r\n\u003Ctd>Update to this or later\u003C\u002Ftd>\r\n\u003C\u002Ftr>\r\n\u003Ctr>\r\n\u003Ctd>8.2\u003C\u002Ftd>\r\n\u003Ctd>8.2.35\u003C\u002Ftd>\r\n\u003Ctd>Update now; 8.2 reaches end of life on December 31, 2026\u003C\u002Ftd>\r\n\u003C\u002Ftr>\r\n\u003Ctr>\r\n\u003Ctd>8.1, 8.0, 7.4\u003C\u002Ftd>\r\n\u003Ctd>No official release\u003C\u002Ftd>\r\n\u003Ctd>Use your distribution’s or an LTS vendor’s patched package, PHP’s minimal source backports, or upgrade\u003C\u002Ftd>\r\n\u003C\u002Ftr>\r\n\u003Ctr>\r\n\u003Ctd>7.3 and older (including PHP 5)\u003C\u002Ftd>\r\n\u003Ctd>No fix\u003C\u002Ftd>\r\n\u003Ctd>Affected; upgrade to a supported branch\u003C\u002Ftd>\r\n\u003C\u002Ftr>\r\n\u003C\u002Ftbody>\r\n\u003C\u002Ftable>\r\n\u003C\u002Fdiv>\r\n\u003Ch3 dir=\"ltr\" aria-level=\"4\">Check your PHP version\u003C\u002Fh3>\r\n\u003Cdiv>\r\n\u003Cdiv dir=\"ltr\" tabindex=\"0\" role=\"group\" aria-label=\"bash code\">\r\n\u003Cdiv>\r\n\u003Cdiv> \u003C\u002Fdiv>\r\n\u003C\u002Fdiv>\r\n\u003Cdiv>bash\u003C\u002Fdiv>\r\n\u003Cdiv>\r\n\u003Cpre>\u003Ccode class=\"language-bash\">php -v\u003C\u002Fcode>\u003C\u002Fpre>\r\n\u003C\u002Fdiv>\r\n\u003C\u002Fdiv>\r\n\u003C\u002Fdiv>\r\n\u003Cp dir=\"ltr\">This shows the command-line version, which can differ from the version your web server uses. Check the web-facing one too, for example:\u003C\u002Fp>\r\n\u003Cdiv>\r\n\u003Cdiv dir=\"ltr\" tabindex=\"0\" role=\"group\" aria-label=\"bash code\">\r\n\u003Cdiv>\r\n\u003Cdiv> \u003C\u002Fdiv>\r\n\u003C\u002Fdiv>\r\n\u003Cdiv>bash\u003C\u002Fdiv>\r\n\u003Cdiv>\r\n\u003Cpre>\u003Ccode class=\"language-bash\">php-fpm8.3 -v          # match your version\r\napachectl -M | grep php   # shows whether Apache loads mod_php\u003C\u002Fcode>\u003C\u002Fpre>\r\n\u003C\u002Fdiv>\r\n\u003C\u002Fdiv>\r\n\u003C\u002Fdiv>\r\n\u003Cp dir=\"ltr\">Linux distributions often patch PHP without changing the version number, so an older-looking version string can still be fixed. Check your distribution’s security notice for CVE-2026-109618 and CVE-2026-109619.\u003C\u002Fp>\r\n\u003Ch3 dir=\"ltr\" aria-level=\"4\">How to update\u003C\u002Fh3>\r\n\u003Cp dir=\"ltr\">\u003Cstrong>Debian or Ubuntu\u003C\u002Fstrong>\u003C\u002Fp>\r\n\u003Cdiv>\r\n\u003Cdiv dir=\"ltr\" tabindex=\"0\" role=\"group\" aria-label=\"bash code\">\r\n\u003Cdiv>\r\n\u003Cdiv> \u003C\u002Fdiv>\r\n\u003C\u002Fdiv>\r\n\u003Cdiv>bash\u003C\u002Fdiv>\r\n\u003Cdiv>\r\n\u003Cpre>\u003Ccode class=\"language-bash\">sudo apt update && sudo apt upgrade\u003C\u002Fcode>\u003C\u002Fpre>\r\n\u003C\u002Fdiv>\r\n\u003C\u002Fdiv>\r\n\u003C\u002Fdiv>\r\n\u003Cp dir=\"ltr\">\u003Cstrong>RHEL, Rocky, Alma or Fedora (including Remi packages)\u003C\u002Fstrong>\u003C\u002Fp>\r\n\u003Cdiv>\r\n\u003Cdiv dir=\"ltr\" tabindex=\"0\" role=\"group\" aria-label=\"bash code\">\r\n\u003Cdiv>\r\n\u003Cdiv> \u003C\u002Fdiv>\r\n\u003C\u002Fdiv>\r\n\u003Cdiv>bash\u003C\u002Fdiv>\r\n\u003Cdiv>\r\n\u003Cpre>\u003Ccode class=\"language-bash\">sudo dnf update \"php*\"\u003C\u002Fcode>\u003C\u002Fpre>\r\n\u003C\u002Fdiv>\r\n\u003C\u002Fdiv>\r\n\u003C\u002Fdiv>\r\n\u003Cp dir=\"ltr\">\u003Cstrong>Docker\u003C\u002Fstrong>\u003C\u002Fp>\r\n\u003Cdiv>\r\n\u003Cdiv dir=\"ltr\" tabindex=\"0\" role=\"group\" aria-label=\"bash code\">\r\n\u003Cdiv>\r\n\u003Cdiv> \u003C\u002Fdiv>\r\n\u003C\u002Fdiv>\r\n\u003Cdiv>bash\u003C\u002Fdiv>\r\n\u003Cdiv>\r\n\u003Cpre>\u003Ccode class=\"language-bash\">docker compose build --pull\r\ndocker compose up -d\r\ndocker compose exec php php -v\u003C\u002Fcode>\u003C\u002Fpre>\r\n\u003C\u002Fdiv>\r\n\u003C\u002Fdiv>\r\n\u003C\u002Fdiv>\r\n\u003Cp dir=\"ltr\">Use a fixed image tag for your branch.\u003C\u002Fp>\r\n\u003Cp dir=\"ltr\">\u003Cstrong>Shared hosting, cPanel or Plesk:\u003C\u002Fstrong> check your control panel or your host’s status page, and ask support to confirm the PHP version your site uses is patched.\u003C\u002Fp>\r\n\u003Cp dir=\"ltr\">\u003Cstrong>WordPress and Laravel:\u003C\u002Fstrong> these run on top of PHP, so updating plugins or Composer packages does not fix this. The PHP version on the server has to change.\u003C\u002Fp>\r\n\u003Cp dir=\"ltr\">\u003Cstrong>Restart after updating.\u003C\u002Fstrong> The fix does not apply until PHP restarts:\u003C\u002Fp>\r\n\u003Cdiv>\r\n\u003Cdiv dir=\"ltr\" tabindex=\"0\" role=\"group\" aria-label=\"bash code\">\r\n\u003Cdiv>\r\n\u003Cdiv> \u003C\u002Fdiv>\r\n\u003C\u002Fdiv>\r\n\u003Cdiv>bash\u003C\u002Fdiv>\r\n\u003Cdiv>\r\n\u003Cpre>\u003Ccode class=\"language-bash\">sudo systemctl restart php8.3-fpm   # match your version\r\nsudo systemctl restart apache2      # or httpd, if you use mod_php\u003C\u002Fcode>\u003C\u002Fpre>\r\n\u003C\u002Fdiv>\r\n\u003C\u002Fdiv>\r\n\u003C\u002Fdiv>\r\n\u003Ch3 dir=\"ltr\" aria-level=\"4\">If you can’t update right now\u003C\u002Fh3>\r\n\u003Cp dir=\"ltr\">PHP states that no configuration change fully mitigates these vulnerabilities. Some hosts applied partial settings, for example disabling \u003Ccode dir=\"ltr\">session.upload_progress.enabled\u003C\u002Fcode>, which blocks one attack path, but treat those as short-term measures. In the meantime:\u003C\u002Fp>\r\n\u003Cul dir=\"ltr\">\r\n\u003Cli>Restrict internet access to any PHP system you can’t update yet, starting with servers running Apache \u003Ccode dir=\"ltr\">mod_php\u003C\u002Fcode>.\u003C\u002Fli>\r\n\u003Cli>Ask your host or CDN whether they have deployed temporary firewall rules.\u003C\u002Fli>\r\n\u003Cli>Plan a move off any branch without security support (8.1 and older, and 8.2 after its end-of-life date).\u003C\u002Fli>\r\n\u003C\u002Ful>\r\n\u003Ch3 dir=\"ltr\" aria-level=\"4\">Check for signs of compromise\u003C\u002Fh3>\r\n\u003Cp dir=\"ltr\">If a server was exposed before it was patched, look for unexpected changes:\u003C\u002Fp>\r\n\u003Cdiv>\r\n\u003Cdiv dir=\"ltr\" tabindex=\"0\" role=\"group\" aria-label=\"bash code\">\r\n\u003Cdiv>\r\n\u003Cdiv> \u003C\u002Fdiv>\r\n\u003C\u002Fdiv>\r\n\u003Cdiv>bash\u003C\u002Fdiv>\r\n\u003Cdiv>\r\n\u003Cpre>\u003Ccode class=\"language-bash\">sudo find \u002Fvar\u002Fwww -name \"*.php\" -mtime -7 -ls\u003C\u002Fcode>\u003C\u002Fpre>\r\n\u003C\u002Fdiv>\r\n\u003C\u002Fdiv>\r\n\u003C\u002Fdiv>\r\n\u003Cul dir=\"ltr\">\r\n\u003Cli>Review recently modified PHP files, new user accounts, scheduled jobs (\u003Ccode dir=\"ltr\">crontab -l\u003C\u002Fcode>, \u003Ccode dir=\"ltr\">\u002Fetc\u002Fcron.*\u003C\u002Fcode>) and unusual outbound connections (\u003Ccode dir=\"ltr\">ss -tupn\u003C\u002Fcode>).\u003C\u002Fli>\r\n\u003Cli>Look through web server logs for odd requests around and after October 17.\u003C\u002Fli>\r\n\u003Cli>If you suspect a compromise, take the server out of service, restore from a clean backup, and rotate secrets such as database passwords and application keys.\u003C\u002Fli>\r\n\u003C\u002Ful>\r\n\u003Ch3 dir=\"ltr\" aria-level=\"4\">FAQ\u003C\u002Fh3>\r\n\u003Cp dir=\"ltr\">\u003Cstrong>Do I need to update if I only use WordPress or Laravel?\u003C\u002Fstrong> Yes. The flaws are in PHP, so the server’s PHP version matters, whatever application runs on it.\u003C\u002Fp>\r\n\u003Cp dir=\"ltr\">\u003Cstrong>Is my site affected if it uses PHP 8.1 or older?\u003C\u002Fstrong> Yes. These versions have no official fix, so use a patched package from your distribution or vendor, or upgrade.\u003C\u002Fp>\r\n\u003Cp dir=\"ltr\">\u003Cstrong>Is the problem solved by a firewall rule?\u003C\u002Fstrong> No. Firewall rules reduce the risk, but PHP says updating is the only complete fix.\u003C\u002Fp>\r\n\u003Ch3 dir=\"ltr\" aria-level=\"4\">Sources\u003C\u002Fh3>\r\n\u003Cul dir=\"ltr\">\r\n\u003Cli>PHP security announcement: \u003Ca href=\"https:\u002F\u002Fwww.php.net\u002Farchive\u002F2026.php\">https:\u002F\u002Fwww.php.net\u002Farchive\u002F2026.php\u003C\u002Fa>\u003C\u002Fli>\r\n\u003Cli>GitHub advisories: \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fphp\u002Fphp-src\u002Fsecurity\u002Fadvisories\u002FGHSA-w8hw-w9fx-j79w\">https:\u002F\u002Fgithub.com\u002Fphp\u002Fphp-src\u002Fsecurity\u002Fadvisories\u002FGHSA-w8hw-w9fx-j79w\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fphp\u002Fphp-src\u002Fsecurity\u002Fadvisories\u002FGHSA-6wmf-4rv5-p3rp\">https:\u002F\u002Fgithub.com\u002Fphp\u002Fphp-src\u002Fsecurity\u002Fadvisories\u002FGHSA-6wmf-4rv5-p3rp\u003C\u002Fa>\u003C\u002Fli>\r\n\u003Cli>NVD: \u003Ca href=\"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-109618\">https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-109618\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-109619\">https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-109619\u003C\u002Fa>\u003C\u002Fli>\r\n\u003Cli>UK NCSC alert: \u003Ca href=\"https:\u002F\u002Fwww.ncsc.gov.uk\u002Fnews\u002Fcritical-security-issue-affecting-php\">https:\u002F\u002Fwww.ncsc.gov.uk\u002Fnews\u002Fcritical-security-issue-affecting-php\u003C\u002Fa>\u003C\u002Fli>\r\n\u003Cli>watchTowr FAQ: \u003Ca href=\"https:\u002F\u002Fwatchtowr.com\u002Fintelligence\u002Fphp-cve-2026-109618-faq\u002F\">https:\u002F\u002Fwatchtowr.com\u002Fintelligence\u002Fphp-cve-2026-109618-faq\u002F\u003C\u002Fa>\u003C\u002Fli>\r\n\u003C\u002Ful>","https:\u002F\u002Fadmin.uibuilderhub.com\u002Fstorage\u002Fblogs\u002FF46Er7DgYGT90aPcXEmNw3FHKlY6ECI65ei4ECK7.jpg","2026-10-24T17:29:00.000000Z","PHP2Shell: Patch the Critical PHP RCE Flaws","PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical remote code execution flaws (CVE-2026-109618 and CVE-2026-109619). Check your version and update now. (156 characters)","php,Vulnerability,fixes",2,5,"3 days ago"]