Published • loading... • Updated
AI Just Found a Bug That Puts Up to 70% of the World’s Websites at Risk
The fixes address remote code execution flaws rated 9.2 out of 10, and security agencies urged operators to patch or isolate affected sites.
- On Wednesday, October 21, 2026, PHP developers released emergency updates addressing two critical remote code execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619, urging all users to patch immediately.
- The emergency release followed online leaks and reports of early exploitation, with security researchers confirming the flaws affect all PHP versions dating back to PHP 5.
- Rated 9.2 on the CVSS severity scale, the flaws allow unauthenticated remote code execution. Longtime security consultant Davi Ottenheimer described the vulnerable file interface as "a front door with no lock."
- Government agencies in the Netherlands and Finland took websites offline as a precaution, while the European Union's CERT-EU advised organizations to isolate internet-facing applications until patches are applied.
- PHP powers nearly 70% of websites, raising concerns millions of servers remain exposed. Security experts warn exploit tools like "PHP2Shell" are circulating, intensifying risks of rapid attacks.
Insights by Ground AI
176 Articles
176 Articles
Numerous websites and online services worldwide are currently in danger: The reason for this is a vulnerability in the widespread programming language PHP. The potential danger is therefore extremely high.
·Hamburg, Germany
Read Full Article
‘This Is Not A Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire
The PHP Foundation has revealed two serious vulnerabilities that could impact millions of websites. Security experts warn that failure to quickly patch the flaws could have dire consequences.
·San Francisco, United States
Read Full Article
PHP Ships Emergency Fixes for php2shell Remote Code Execution Flaws as Cloudflare Reports Attacks
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix CVE-2026-109618 and CVE-2026-109619, two critical runtime flaws that can allow unauthenticated remote code execution. Details leaked early, and Cloudflare says it saw attack traffic before the release.
Coverage Details
Total News Sources176
Leaning Left19Leaning Right27Center21Last UpdatedBias Distribution40% Right
Bias Distribution
- 40% of the sources lean Right
40% Right
L 29%
C 31%
R 40%
Factuality
To view factuality data please Upgrade to Premium
