Public Services Suspended Due to Critical Vulnerabilities in PHP Software
Due to critical security vulnerabilities identified in PHP software, some public services and websites were temporarily shut down in countries such as Germany, France, Belgium, and the Netherlands.
Two critical security vulnerabilities emerging in the PHP infrastructure caused disruptions in public services on a global scale, while urgent calls were made to install updates published on October 21.
Two critical security vulnerabilities detected in PHP software, which is widely used in website infrastructure, pave the way for cyber attackers to intervene in systems without authorization and capture personal data. While one of the vulnerabilities was identified in 2024, the other was discovered in August 2026 by Calif with artificial intelligence support and verified by Google-affiliated Wiz.
In line with these risks, ITZBund in Germany, prefectures in France, the Belgian Ministry of Foreign Affairs, and state services in Finland temporarily shut down their websites. In the Netherlands, alongside public services, the systems of the Port of Rotterdam and some hospitals were deactivated, while the Wikimedia Foundation also announced that it had shut down some of its systems. In Turkey, the Presidency's Directorate of Cybersecurity initiated security scans in public institutions and sent urgent precaution notifications. While PHP developers published updates on October 21, the NSA and EU cybersecurity units reported that the patches must be installed immediately.
Sources
- aa.com.tr · Link