500 Internal Server Error: What It Means and How to Fix It

Critical PHP Security Update: Two RCE Flaws (CVE-2026-109618, CVE-2026-109619)

Two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) can allow unauthenticated attackers to execute code on affected web servers. Both carry a CVSS v4.0 score of 9.2, and exploitation attempts are already being observed in the wild. PHP has released the following fixed versions: PHP branch Fixed version PHP 8.5 8.5.12 PHP 8.4 8.4.27 PHP 8.3 8.3.36 PHP 8.2 8.2.35 If you manage your own server or VPS,…

HTTP 401 Unauthorized: What It Means and How to Fix It

You load your site, or visit an API endpoint your app relies upon, and instead of a page you find a brief, unhelpful message: 401 Unauthorized. Sometimes a browser password box appears. Other times, a blank white page presents only that number. In either case, visitors are shut out, and if the error strikes your admin area, even you are left at the threshold. The good news is that a 401 is one of the more honest HTTP…

What Is Encryption? How It Protects Your Website and Its Data

If you run a website, you’ve already met encryption even if you’ve never used the word. It’s the 🔒 padlock in the browser bar, the reason your host told you to stop using plain FTP, and the checkbox on your backup settings that says “encrypt archive.” Encryption is one of the few security controls that works quietly and almost never needs your attention, which is exactly why it’s easy to misunderstand. Plenty of site…

Vulnerability & Patch Roundup — September 2026