Critical vulnerabilities detected in the PHP programming language triggered a global security alarm
PHP Foundation has released patches against PHP vulnerabilities discovered by Wiz and Calif spanning the last decade. These security flaws, which could affect a large portion of the internet, have forced governments and institutions around the world to take precautions.
Critical security vulnerabilities that went unnoticed for over a decade have been detected in the PHP programming language, which forms a significant part of the internet infrastructure. Brought to light with the help of artificial intelligence and designated as CVE-2026-109618 and CVE-2026-109619 under the name 'php2shell', the vulnerabilities were rated 9.2 out of 10 in severity.
The vulnerabilities announced by cybersecurity firms Wiz and Calif affect versions of PHP released over the past decade. The PHP Foundation released the necessary patches on Wednesday to address these vulnerabilities. So far, there are no reports of these vulnerabilities being successfully exploited.
Governments and cybersecurity organizations worldwide have warned website owners to check their systems and install the updates. Some organizations have chosen to go offline temporarily due to the security risk. Experts emphasize that updates are critically important to protect platforms against potential attacks.
Sources
- bbc.com · Link