This update to PILOS v4 is security release fixing two critical vulnerabilities (CVE-2026-109618, CVE-2026-109619) in PHP that can allow unauthenticated remote code execution.
To Install this version check our Getting Started Guide
Security
- Updated PHP to 8.5.12 to fix CVE-2026-109618 (9.2) + CVE-2026-109619 (9.2) (#3561) by @samuelwei
Full Changelog: v4.18.2...v4.18.3