Sfoglia categorie
Esplora
Fiverr Pro
Italiano
$
USD
I will patch the critical PHP rce vulnerability cve 2026 109618 on your servers
Mohamed A.
Informazioni su questo servizio
On October 21, 2026, PHP disclosed two CRITICAL unauthenticated remote code execution bugs in PHP core: CVE-2026-109618 and CVE-2026-109619 (CVSS 9.2, PHP2Shell). Every PHP 8.2 to 8.5 install serving web traffic is affected: PHP-FPM, Apache mod_php, FrankenPHP, Docker images. CISA issued an alert and a public exploit is expected imminently.
The attack hits PHP's session upload-progress handler BEFORE your application code runs, so Laravel, Symfony or WordPress hardening does not protect you. The only complete fix is upgrading PHP.
I am a tech lead with 9 years of Laravel/PHP and production CI/CD experience. What I do:
- Audit every PHP install (CLI, FPM, Apache, Docker, CI runners) and report exact versions
- Upgrade to the fixed release: 8.2.35 / 8.3.36 / 8.4.27 / 8.5.12 and verify with real requests
- Harden php.ini and FPM: session.upload_progress off, body-size limits, pm.max_requests
- Rebuild Docker images and add a PHP version gate to your GitHub Actions or GitLab pipeline
- Deliver a short written report you can forward to clients or management
Supported: Ubuntu, Debian, RHEL, Docker, Forge, Vapor, Ploi, cPanel, Kubernetes. Message me with your server count before ordering.
Rispettare i diritti di terzi
Ricorda che è contrario alle politiche di Fiverr per i freelance includere temi, modelli o qualsiasi altro elemento che violi i diritti di terzi o le leggi applicabili nell'opera consegnata. Per saperne di più, consulta Guida alla creazione digitale responsabile.
Scopri di più su Mohamed A.
Mohamed A.
- DaMarocco
- Membro danov 2016
- Ultima consegna3 anni
Lingue
Francese, Arabo, Inglese
Hi, I'm a Fullstack developer with more than 5 years of experiences, i helped many businesses make them Web and mobile apps.
I am specialised in Laravel / Vue js and Flutter technologies.
What do you want ?
A Static Website to present your business, Easy !
A Delivery or E-commerce mobile app, Why not...
A Software as service application to automate your/your team daily routine tasks, "c'est ma tasse de thé" ;)
FAQ
How do I know if I am affected?
If you run PHP 8.2 to 8.5 (or any older unsupported version) and serve HTTP requests, you are affected. Send me your php -v output and I will confirm for free.
Will there be downtime?
Typically a few seconds while PHP-FPM or Apache restarts. I schedule it with you and can do zero-downtime on load-balanced setups.
What access do you need?
SSH access with sudo, or a Forge/Ploi collaborator invite. I recommend a temporary user you can revoke after delivery. Never send credentials in plain text; use a secret link.
What if my host does not offer the patched PHP version yet?
I apply the documented temporary mitigations immediately (upload progress off, body limits, worker recycling) and complete the upgrade as soon as packages are available, included at no extra cost.
Does this cover Laravel or WordPress updates too?
This gig covers the PHP runtime and server configuration. A framework or dependency audit (composer audit and fixes) is available as a gig extra or custom offer.
