
PHP 8.5.11 SOAP: what I would change after CVE-2026-91765
PHP 8.5.11 shipped 24 Sep 2026 for CVE-2026-91765. I would run php -v, php-fpm -v, and php -m before I claim I am patched. This is a SoapServer DoS on ext-soap, not a Laravel-core CVE. Ubuntu 24.04 archive PHP is still not that tag.
Oct 2, 2026 · 9 min read




