On October 21, 2026, patched versions of PHP were released, and it was announced that two critical vulnerabilities had been ...

Binance founder Changpeng “CZ” Zhao told his followers on Wednesday, October 21, to be “extra careful” visiting any website for the next few days. Why? PHP rushed out fixes for two PHP vulnerabilities ...

Some organizations have temporarily taken websites and online services offline rather than leave vulnerable systems exposed.

Cyber released php2shell-scanner, an open-source tool that tests whether a host is exposed to CVE-2026-109618 and ...

Sakura Internet suspended database web tools on its cloud over two PHP flaws, hours before Prime Minister Sanae Takaichi ...

This is an app that searches for dangerous files left behind by mistake that cyber attackers target, from website ...

PHP2Shell is not just a web hosting problem. PHP also runs NAS interfaces, firewalls, Nextcloud containers and older Pi-hole ...

(CVE-2026-109618, CVE-2026-109619): critical unauthenticated RCE in PHP core. Patch out Oct 21. WordPress, Magento, Drupal ...

Korea privacy watchdog urges PHP patching to prevent mass data leaks Public and private operators urged to patch PHP and lock ...

Kazakhstan’s National Computer Emergency Response Team KZ-CERT has issued an urgent warning to local website administrators ...

The Personal Information Protection Commission has urged public institutions and businesses to take preventive measures ...

Problem in PHP language that underpins 70% of websites has led governments and companies to pull sites offline while they patch fault ...