Published 1 hour ago • loading... • Updated 15 minutes ago

EU agency warns websites may need to be taken offline as PHP prepares patches for vulnerabilities

On Wednesday, Oct 21, 2026, PHP developers announced they will release patches for two critical vulnerabilities, scheduling the fix for 1400 GMT amid speculation of serious cyber intrusions.
Both vulnerabilities hold a 9.2 rating on the CVSS v4.0 severity scale, indicating a risk of unauthenticated remote code execution, with all versions from PHP 5 onward potentially affected.
Cybersecurity company Huntress noted the software powers WordPress, Drupal, Joomla, and Magento sites, while web hosting provider GoDaddy warned attackers could execute code and compromise systems entirely.
The European Union Computer Emergency Response Team urged organizations to prepare for immediate patching, advising administrators unable to apply fixes should consider taking affected sites offline.
While the Australian Cyber Security Centre stated it is currently not aware of active exploitation, PHP urged users to "upgrade as soon as the release is available.

Insights by Ground AI

16 Articles

bworldonline.com

Center

EU agency warns websites may need to be taken offline as PHP prepares patches for vulnerabilities - BusinessWorld Online

THE DEVELOPERS of the widely used PHP programming language said on Wednesday they would release patches for two…

18 minutes ago

Read Full Article

Cyprus Mail

Lean Right

Critical PHP flaws put millions of websites at risk

Two critical PHP vulnerabilities threaten website security, prompting urgent warnings from EU and Australian cybersecurity authorities as developers prepare fixes.

60 minutes ago·Nicosia, Cyprus

Read Full Article

RTÉ

Center

EU cybersecurity agency in warning on PHP vulnerabilities

EU cybersecurity officials have warned organisations unable to apply planned PHP fixes should take affected websites offline.

1 hour ago·Ireland

Read Full Article

Rappler

Lean Left

EU warns websites may need to be taken offline as PHP prepares patches for vulnerabilities

PHP is used across large parts of the internet, and speculation has circulated over the past day that websites running the software could be exposed to serious cyber intrusions

1 hour ago·Pasig, Philippines (the)

Read Full Article

Reuters

+4 Reposted by 4 other sources

Center

EU agency warns websites may need to be taken offline as PHP prepares patches for vulnerabilities

The developers of the widely used PHP programming language said on Wednesday they would release patches for two critical vulnerabilities, as EU cybersecurity officials warned organisations unable to apply the fixes should take affected websites offline.

1 hour ago·London, United Kingdom

Read Full Article