GoKawiilNCSC urges urgent PHP patch after two critical vulnerabilities found
The UK's National Cyber Security Centre, along with EU and Australian counterparts, has told organisations using PHP to install a critical update released by the PHP Foundation on Wednesday. Two vulnerabilities were identified that could allow unauthenticated remote code execution, potentially letting attackers install malware or disable websites. Officials say affected versions may stretch back as far as PHP 5, released in 2004.
GoKawiil's interpretation of the reporting above, not reported fact.
PHP underpins huge swathes of the internet, including platforms like WordPress, Drupal and Magento, so unpatched flaws could expose a vast number of sites to compromise. Cloudflare's CTO has reported seeing early attacks already emerging, suggesting exploitation attempts may be accelerating before all organisations can patch. The guidance to take systems offline if immediate fixes aren't possible underscores how seriously security agencies are treating the risk.
- PHP Foundation released patches for two critical vulnerabilities on Wednesday
- NCSC, EU and Australian cyber agencies urge immediate patching or taking sites offline
- Flaws could enable unauthenticated remote code execution across widely used platforms
Source: bbc.co.uk — Watch Our Pick Of Standout Clips Across The Bbc, 2026-10-21
Published there as: “Cyber chiefs tell websites to make critical safety update or go offline”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.