Critical PHP Vulnerabilities Disclosed Exposing Millions of Websites to Remote Code Execution
What happened
Two critical vulnerabilities in PHP were disclosed, allowing unauthenticated remote code execution on millions of servers.
The Context
- Severity Rating: The vulnerabilities, CVE-2026-109618 and CVE-2026-109619, are rated 9.2/10 under CVSS v4.0, indicating a high risk of exploitation.
- Global Impact: PHP powers approximately 70% of identifiable websites, meaning a significant portion of the internet is at risk, with disruptions already reported in government services across multiple countries.
- Urgent Response: The PHP Foundation released patches on October 21, 2026, but agencies like the FBI and ENISA are warning of ongoing exploitation attempts, urging immediate updates.
The Number
internet-connected servers are potentially exposed to these vulnerabilities, highlighting the urgent need for security measures in your web infrastructure.
Takeaway
As organizations rush to patch their systems, expect increased scrutiny on PHP-based applications and a potential rise in security audits.
General features and special-interest coverage from Okaz.
"This feed appears to be a section-specific Okaz stream, so the label is kept intentionally broad until confirmed."
— A47 Editor
ثغرتان خطيرتان في «PHP» تهددان ملايين المواقع على الإنترنت
Recent discoveries of two critical security vulnerabilities in the PHP programming language have raised alarms globally, affecting millions of websites and applications. The vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619, have pro...
Arabic tech news covering startups, apps, AI, and gadgets.
"AITnews is a well-known Arabic technology outlet covering regional tech developments."
— A47 Editor
ثلاثة أحرف هزّت الإنترنت.. ما قصة ثغرات PHP التي تهدد المواقع حول العالم؟
A significant security threat has emerged for websites and digital services worldwide due to the discovery of two critical vulnerabilities in the widely used PHP programming language, which powers many sites, including those built on WordPress. This ...
Technology and innovation coverage, including consumer tech and digital transformation stories.
"Emirates 24|7 technology coverage often highlights practical tech developments with relevance to Gulf readers and businesses."
— A47 Editor
Governments, companies across the world take websites offline over PHP flaws
Several government, school, and hospital websites across Europe and beyond were taken offline as organizations responded to critical security vulnerabilities in PHP, a programming language that underpins a significant portion of the internet. Cyberse...
Technology and innovation coverage, including consumer tech and digital transformation stories.
"Emirates 24|7 technology coverage often highlights practical tech developments with relevance to Gulf readers and businesses."
— A47 Editor
Millions of hacking attempts as companies, governments rush to patch PHP flaws
Companies and governments worldwide are urgently addressing critical vulnerabilities in the PHP programming language, following reports of millions of hacking attempts. The vulnerabilities prompted emergency measures, including the shutdown of variou...
English-language digital publication covering business, politics, technology, and current affairs.
"The Arabian Post mixes original and syndicated-style coverage with a broad regional and global business-news orientation."
— A47 Editor
Critical PHP flaws force government websites offline worldwide
Government websites across Europe, including those in the Netherlands, Finland, France, and Germany, were temporarily taken offline due to critical vulnerabilities in the PHP programming language, which supports a significant portion of global websit...
English-language digital publication covering business, politics, technology, and current affairs.
"The Arabian Post mixes original and syndicated-style coverage with a broad regional and global business-news orientation."
— A47 Editor
PHP issues emergency fixes after critical vulnerability leak
PHP developers have issued emergency security updates to address two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, after details of these flaws were leaked online. This has prompted global cybersecurity authorities to alert organizat...
Egyptian politics, economy, and society coverage.
"Al Masry Al Youm is a major Egyptian newspaper with broad national coverage."
— A47 Editor
استنفار سيبراني عالمي.. ثغرات أمنية تدفع عدة دول لتعطيل مواقع إلكترونية
A global cybersecurity alert has been triggered as several countries and governmental institutions respond to the discovery of two critical security vulnerabilities in the widely used PHP programming language, which powers numerous websites and appli...