# Update: Critical PHP Fixes Required for TAO

**URL:** <https://forum.community.taotesting.com/t/update-critical-php-fixes-required-for-tao/173>\
**Category:** Announcements\
**Tags:** updates\
**Created:** [October 22, 2026, 11:43am UTC](https://forum.community.taotesting.com/t/update-critical-php-fixes-required-for-tao/173 "2026-10-22T11:43:00Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![CarlottaP](https://avatars.discourse-cdn.com/v4/letter/c/ecc23a/32.png) [@CarlottaP](https://forum.community.taotesting.com/u/CarlottaP)\
**Post date:** [October 22, 2026, 11:43am UTC](https://forum.community.taotesting.com/t/update-critical-php-fixes-required-for-tao/173/1 "2026-10-22T11:43:01Z")

</div>

Dear Community,

Following the disclosure of two critical vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619), we are writing to inform you of our response and the steps you should take for your TAO installation.  
PHP is one of the technologies used to run TAO. The PHP project released security fixes for these vulnerabilities on 21 October 2026.

**What we are doing**

Our team is preparing and validating a new TAO Community Edition release, which we are working to make available for download as soon as possible. We will notify the community when it is available and provide accompanying update instructions.

**What you should do now**

If you host TAO yourself or through a hosting provider, you are responsible for updating the PHP runtime used by your installation.

Please review the [official PHP security advisory](https://www.php.net/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-8yH7VRc3hJLVqAgzFqwEGGmHH1TpsNv-clsuM-V273ca-bAtnVnEHiC09wNvjaP36_Tz99) and apply the appropriate PHP security updates as soon as possible, coordinating with your system administrator or hosting provider. Do not wait for the new TAO release to address the PHP vulnerabilities.

Updating TAO application files alone does not necessarily update the PHP runtime on your server.

We continue to monitor the situation closely and will share further information, including the download link and release notes, as soon as the new release is available.

The TAO Community Edition Team