GoKawiilPHP Discloses Two Critical Flaws, Prompting Government Sites to Go Offline
PHP disclosed two critical vulnerabilities affecting versions from PHP 5 onward and urged operators to patch immediately. In response, government websites in Europe and elsewhere temporarily shut down on Wednesday while administrators applied fixes. Cloudflare CTO Dane Knecht said the company observed early attacks and was updating firewall rules as a temporary stopgap while awaiting the official patch.
GoKawiil's interpretation of the reporting above, not reported fact.
The breadth of affected versions suggests a huge portion of the web's server-side infrastructure could be exposed, since PHP powers a large share of government and enterprise sites. Cloudflare's framing of its mitigation as only a 'stopgap' implies the underlying risk persists until operators apply PHP's own patch, leaving a window where attackers already probing the flaw could cause further damage.
- PHP disclosed two critical vulnerabilities affecting versions from PHP 5 onward.
- Government websites in Europe and elsewhere went offline temporarily to apply protective measures.
- Cloudflare has deployed firewall rule updates as a temporary stopgap while urging immediate official patching.
Source: developers.slashdot.org, 2026-10-21
Published there as: “Government Websites Go Dark After Severe PHP Vulnerabilities Disclosed”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.