Sri Lanka CERT warns of critical PHP security vulnerabilities

Sri Lanka CERT warns of critical PHP security vulnerabilities

Sri Lanka CERT warns of critical PHP security vulnerabilities

Critical PHP Vulnerability: What Businesses Should Do to Protect Their Websites and Systems

If your organisation has a website, online portal, or other system that uses PHP, you should be aware of an important cybersecurity issue. The National Cyber Security Centre (NCSC) guidance on the critical security issue affecting PHP identifies two vulnerabilities, CVE-2026-109618 and CVE-2026-109619, and encourages organisations to take immediate action. This security issue could allow […]

Critical security issue affecting PHP

Updated: The NCSC is encouraging UK organisations to take immediate action to mitigate a security issue affecting PHP (CVE-2026-109618 and CVE-2026-109619).

CERT Urges Immediate PHP Security Updates After Critical Vulnerability Alert - Business News

Organizations and website developers using PHP should check their systems and apply security updates immediately, Sri Lanka CERT has warned. The cybersecurity alert covers two critical vulnerabilities identified as CVE-2026-109618 and CVE-2026-109619. Sri Lanka CERT said these vulnerabilities could allow attackers to gain unauthorized access to systems. They could also lead to data theft and service disruption. The warning covers public and priv…