Discover the critical PHP vulnerability allowing unauthorized system takeovers. KISA urges immediate security updates for ...
Two vulnerabilities leading to unauthenticated code execution. Impact on WordPress, Laravel, and enterprise systems, and a ...
A critical security vulnerability has been discovered in PHP, a programming language widely used to implement login systems, ...
Global websites face hacking threats as critical PHP security vulnerabilities are uncovered by AI, prompting urgent patches ...
PHP2Shell (CVE-2026-109618/109619) enables RCE without authentication. Patches are coming today; the NCSC and other sites are ...
Some organizations have temporarily taken websites and online services offline rather than leave vulnerable systems exposed.
Critical PHP flaws forced European government websites offline. Learn which PHP versions need patches and what IT teams should do.
Two critical bugs in PHP, the language running most of the web, let strangers take over servers without a password. The patch ...
On October 21, 2026, the PHP development team announced a critical emergency vulnerability (CVE-2026-109618 / CVE-2026-109619 ...
Amazon detected a PHP2Shell exploit attempt on October 17, before disclosure, followed by further attempts after patches were ...
Recognizing that exploit code has also been made public, raising the risk of large-scale hacking damages, the government ...
CERT-EU says firms that cannot patch two critical PHP flaws should consider taking sites offline. PHP releases fixes at 14:00 UTC on .