On October 20, 2026, two critical remote code execution vulnerabilities were found in PHP versions from 5.4 to 8.5. The next day, an emergency patch was released. KE0ONU SearXNG was taken offline as a precaution, even though SearXNG does not use any PHP code. The Tampa server is