Government websites go dark after AI-discovered flaw sparks security scramble
The flaws rate 9.2 out of 10 and can allow unauthenticated remote code execution, prompting officials to urge immediate updates or offline isolation.
- On Wednesday, October 21, 2026, PHP developers released emergency security updates addressing two critical remote-code-execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619, urging administrators to apply fixes immediately.
- Leaked vulnerability details forced the PHP security team to accelerate the release by one day after researchers reported proof-of-concept exploits circulating before official fixes were available.
- Rated 9.2 on the CVSS v4.0 severity scale, the flaws allow unauthenticated remote code execution, enabling attackers to run malicious code on vulnerable servers without credentials.
- Government agencies in the Netherlands and Finland took public-facing websites offline as a precautionary measure, following cybersecurity officials' guidance that unpatched systems face severe intrusion risks.
- Administrators must install patches manually, as automatic platform updates do not apply the fix; older, unsupported PHP versions require specific remediation to ensure system integrity.
444 Articles
444 Articles
The discovery of major vulnerabilities in the PHP programming language by artificial intelligence models has led to the preventive suspension of many public portals in Europe and elsewhere.
Madrid, Oct 21 (EFE).- Several countries have already launched alerts to the vulnerabilities that were detected in a programming language (the PHP) widely used to create web pages and applications and that can carry important risks for those servers. Among the countries that have already launched these alerts are the United States, Spain, Germany, the Netherlands, Germany, Germany [...] The entry Global Alert to the vulnerabilities that put the …
Some websites go dark as operators address an AI-detected flaw in a web programming language – WTOP News
The FBI and the National Security Agency warned Wednesday about the discovery of two “critical vulnerabilities” in a widely used programming language that powers websites and web applications.
Some websites go dark as operators address an AI-detected flaw in a we
The FBI and the National Security Agency warned Wednesday about the discovery of two “critical vulnerabilities” in a widely used programming language that powers websites and web applications. The FBI’s cyber division said the vulnerabilities could allow
Two critical cybersecurity flaws have been discovered in the world's most widely used programming language, which according to some estimates powers around 70 percent of all websites. Several governments and agencies have urged websites to install patches as soon as possible. If this is not yet possible, they should temporarily remove their websites. Arnes, which provides network and digital services to Slovenian educational, research and cultur…
Coverage Details
Bias Distribution
- 41% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
