Skip to content
Talbot TechBuilding for the web since 1996 Work with Sean

Talbot Tech · PHP security updates

PHP Critical Patch

Two critical PHP fixes are due today.

We check your PHP setup, install the relevant security update as soon as it is available, and make sure your site still works.

21 October 2026 · PHP security release

PHP scheduled fixes for two critical vulnerabilities for 10 a.m. Eastern (14:00 UTC), each rated CVSS v4.0 9.2. Check the official release for affected and fixed versions. Read PHP's announcement.

Request PHP patching What is included

PHP Critical Patch

What we do

A person reviews your request and does the patch work. You have someone to call if there is a problem.

Check your setup

We check the installed PHP version and how your host supplies security updates. We use PHP’s published advisory to confirm whether your server needs the fix.

Install the update

We confirm access, backups, and a time to make the change with you, then apply the relevant PHP security update.

Check your site

We verify the installed update, check PHP is running, and test the parts of the site we agreed to check.

Tell you what changed

You receive a short report with the installed version, the checks we ran, and anything that still needs attention.

What the price covers

$100 per server covers the PHP patch work confirmed during review. Application rewrites, incident recovery, and other infrastructure repairs are separate work. If your server needs more than this service covers, we explain it before you pay.

How to start

How it works

  1. 01

    Request a review

    Tell us how many servers need help, where they are hosted, and the PHP version if you know it.

  2. 02

    Confirm the work

    We check what is needed, confirm when we can do the work, and send a payment link.

  3. 03

    We patch your servers

    Once access and timing are agreed, we apply the relevant fix ASAP, check your site, and send the results.

Request PHP patching

Need help patching PHP?

Tell us about your servers. We will reply with what we can do and when.

Please do not send passwords or access keys. We arrange access with you after review.

List the hostnames or IP addresses of the servers you want us to check. Do not include passwords, access keys, or customer data.

$100 USD per server, one-time. We review the request before payment. See our privacy policy.

Questions?

Email sean@talbot.tech or call/text +1 (502) 654-8469.