Skip to main content
See who owns your news
Published • loading... • Updated

AI Just Found a Bug That Puts Up to 70% of the World’s Websites at Risk

Security officials said the flaws could allow unauthenticated remote code execution and affect versions dating back to PHP 5, with more than 1.3 million hosts at risk.

  • On Wednesday, October 21, 2026, the PHP security team released emergency patches for two critical remote code execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619, urging administrators to upgrade immediately.
  • Following online leaks and reproduction by watchTowr, the PHP Foundation accelerated the release; both vulnerabilities carry a 9.2 severity rating on the CVSS v4.0 scale.
  • Cloudflare chief technology officer Dane Knecht reported "seeing early attacks emerging," while CERT-EU and the Australian Cyber Security Centre advised organizations to isolate internet-facing applications if immediate patching was not feasible.
  • Government websites in the Netherlands and Finland went offline as a precaution, as operators scrambled to secure infrastructure amid the disclosure of critical vulnerabilities in the widely used programming language.
  • Updating remains the only safe choice, as no workaround fully addresses the flaws, and automatic updates for WordPress will not apply these critical security fixes, requiring manual intervention.
Insights by Ground AI

169 Articles

ReutersReuters
+10 Reposted by 10 other sources
Center

PHP programming language developers issue new version fixing critical vulnerabilities

Developers of the PHP ​programming language ‌said a new version fixing ​two critical ​vulnerabilities was now live ⁠and strongly ​encouraged users ​to update immediately.

·London, United Kingdom
Read Full Article
AftenpostenAftenposten
+2 Reposted by 2 other sources
Lean Right

Websites belonging to government agencies around Europe were shut down as a result of a vulnerability on Wednesday. In Norway, too, more have been affected.

·Oslo, Norway
Read Full Article
Think freely.Subscribe and get full access to Ground NewsSubscriptions start at $9.99/yearSubscribe

Bias Distribution

  • 42% of the sources lean Right
42% Right

Factuality Info Icon

To view factuality data please Upgrade to Premium

Ownership

Info Icon

To view ownership data please Upgrade to Vantage

eSecurityPlanet broke the news on Tuesday, October 20, 2026.
Too Big Arrow Icon
Sources are mostly out of (0)

Similar News Topics

News
Feed Dots Icon
For You
Search Icon
Search
Blindspot LogoBlindspotLocal