2026-10-24 | Release 1.11.87

Enhancements and Fixes

Updated PHP to address critical vulnerabilities

• Addressed remote code execution vulnerabilities CVE-2026-109618 and CVE-2026-109619, collectively known as PHP2Shell.
  • Updated the fastpanel-fphp package used internally by FASTPANEL.
  • Updated the PHP packages installed through FASTPANEL to the following patched versions (amd64):
    • PHP 5.2.17
    • PHP 5.3.29
    • PHP 5.5.38
    • PHP 5.4.45
    • PHP 7.0.33
    • PHP 7.1.33
    • PHP 7.2.34
    • PHP 7.3.33
    • PHP 7.4.33
    • PHP 8.0.30
    • PHP 8.1.34
    • PHP 8.2.35
    • PHP 8.3.36
    • PHP 8.4.27
    • PHP 8.5.12

important

Packages will be updated automatically, but services using PHP must be restarted manually for the updates to take effect.