Government websites go dark after AI-discovered flaw sparks security scramble
Security agencies warned the flaws could let attackers run code on vulnerable servers without logging in, and some operators took sites offline.
- On Wednesday, October 21, 2026, PHP developers released emergency security updates addressing two critical remote-code-execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619, urging administrators to apply fixes immediately.
- Leaked vulnerability details forced the PHP security team to accelerate the release by one day after researchers reported proof-of-concept exploits circulating before official fixes were available.
- Rated 9.2 on the CVSS v4.0 severity scale, the flaws allow unauthenticated remote code execution, enabling attackers to run malicious code on vulnerable servers without credentials.
- Government agencies in the Netherlands and Finland took public-facing websites offline as a precautionary measure, following cybersecurity officials' guidance that unpatched systems face severe intrusion risks.
- Administrators must install patches manually, as automatic platform updates do not apply the fix; older, unsupported PHP versions require specific remediation to ensure system integrity.
401 Articles
401 Articles
Two critical cybersecurity flaws have been discovered in the world's most widely used programming language, which according to some estimates powers around 70 percent of all websites. Several governments and agencies have urged websites to install patches as soon as possible. If this is not yet possible, they should temporarily remove their websites. Arnes, which provides network and digital services to Slovenian educational, research and cultur…
Millions of websites around the world are down on Wednesday due to two flaws in PHP's programming protocol.
These are government websites that have been created with the PHP programming language. With the help of artificial intelligence, “chronic vulnerabilities” that were “hidden” in the software were identified and they are being asked to update immediately. The post Government websites in Europe and the US are being taken down – AI discovered security gaps appeared first on in.gr.
The U.S. National Security Agency has warned that all organizations using PHP will need to install an update to correct vulnerabilities.
Coverage Details
Bias Distribution
- 38% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
