Government websites go dark after AI-discovered flaw sparks security scramble
The flaws rate 9.2 on CVSS v4.0 and could let attackers run code on vulnerable servers without logging in, officials said.
- On Wednesday, October 21, 2026, PHP developers released emergency security updates addressing two critical remote-code-execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619, urging administrators to apply fixes immediately.
- Leaked vulnerability details forced the PHP security team to accelerate the release by one day after researchers reported proof-of-concept exploits circulating before official fixes were available.
- Rated 9.2 on the CVSS v4.0 severity scale, the flaws allow unauthenticated remote code execution, enabling attackers to run malicious code on vulnerable servers without credentials.
- Government agencies in the Netherlands and Finland took public-facing websites offline as a precautionary measure, following cybersecurity officials' guidance that unpatched systems face severe intrusion risks.
- Administrators must install patches manually, as automatic platform updates do not apply the fix; older, unsupported PHP versions require specific remediation to ensure system integrity.
364 Articles
364 Articles
TVA Nouvelles
24 heuresA critical vulnerability of the PHP tool ensures that many websites are inaccessible Tuesday noon in order to correct this flaw.
Government websites are being massively disabled in Europe due to the threat of hacking
Government websites are being massively disabled in Europe due to the threat of hacking. Two vulnerabilities were found in the PHP programming language — it is used to create pages.They potentially open access to millions of servers...
Governments and cybersecurity agencies around the world warn of the need to immediately update the systems of millions of websites that could be compromised by multiple critical bugs in PHP language detected by the company Wiz
It's 'One of the Most Impactful Security Issues in Recent Memory'
Some websites went offline intentionally on Wednesday following a newly disclosed set of vulnerabilities in what NBC News descriptions as "a little-known but crucial programming language which powers how web servers process code." Per W3Techs , PHP is used in 69% of all websites. The two laws were serious enough that...
This is one of the biggest vulnerabilities in Internet history, and has already led to the closure of several government services. More information: Rave, hacker español, about using an email with your first and last name: "It's the worst thing you can do, you expose your identity"
Coverage Details
Bias Distribution
- 35% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
