A Critical Flaw in the Library That Opens iPhone Photos on Your Server
CVE-2026-84383 is a 9.8-rated flaw in libheif, the library most servers use to read HEIC and AVIF. WordPress accepts those uploads by default and opens every one. Three commands to check your server, how to patch it, and what to do while you wait.