Published 2 hours ago • loading... • Updated 19 minutes ago

AI Just Found a Bug That Puts Up to 70% of the World’s Websites at Risk

On Wednesday, October 21, 2026, PHP developers released emergency security updates addressing two critical remote-code-execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619, urging administrators to apply fixes immediately.
Leaked vulnerability details forced the PHP security team to accelerate the release by one day after researchers reported proof-of-concept exploits circulating before official fixes were available.
Rated 9.2 on the CVSS v4.0 severity scale, the flaws allow unauthenticated remote code execution, enabling attackers to run malicious code on vulnerable servers without credentials.
Government agencies in the Netherlands and Finland took public-facing websites offline as a precautionary measure, following cybersecurity officials' guidance that unpatched systems face severe intrusion risks.
Administrators must install patches manually, as automatic platform updates do not apply the fix; older, unsupported PHP versions require specific remediation to ensure system integrity.

Insights by Ground AI

286 Articles

Jyllands-Posten

Lean Right

DI on Serious Security Holes on Websites Worldwide: "It Can't Get Worse"

70 percent of the world's businesses may be affected by serious vulnerability

21 minutes ago·Aarhus, Denmark

Read Full Article

Il Post

Lean Left

Many Websites Have Been Put Offline for Fear of Vulnerabilities Due to Defects Found in PHP Programming Language

22 minutes ago·Italy

Read Full Article

Meduza

Left

In the PHP Programming Language, Two Critical Vulnerabilities Were Identified, Which Led European Governments to Shut Down Their Websites.

Governments, urban administrations and other institutions in Europe have pre-empted their websites after PHP programming language developers announced that they had identified two critical vulnerabilities.

23 minutes ago·Riga, Latvia

Read Full Article

Protothema

Right

Government and Other Websites in Europe Offline Due to Serious Programming Language Bug

The creators of the PHP language released patch versions

29 minutes ago·Marousi, Greece

Read Full Article

Berliner Morgenpost

Lean Right

Worldwide IT Security Gap: Numerous Websites Disabled

A serious security vulnerability in the PHP programming language causes websites to be shut down worldwide. Authorities and IT experts sound the alarm.

29 minutes ago·Berlin, Germany

Read Full Article