PHP security alert spotlights online safety for Fishers
A worldwide security alert for PHP, the programming language used by websites and services including WordPress, led to emergency updates on Oct. 21 to fix...
Tag : PHP
PHP emergency release for two critical RCE flaws (CVSS 9.2)
PHP will ship an out-of-cycle security release at 14:00 UTC on October 21 to address two critical vulnerabilities its security team has rated 9.2 on...
PHP flaws prompt Scottish councils and NHS sites to go offline
Several of Scotland’s public bodies, including councils and NHS boards, temporarily took their websites offline after security flaws were identified in PHP, the programming language...
PHP2Shell: Critical PHP vulnerability — update to 8.2.35+
On October 21, 2026, the PHP development team disclosed two critical vulnerabilities — collectively referred to as PHP2Shell — that allow attackers to run unauthorized...
PHP Critical RCE: CVE-2026-109618 and CVE-2026-109619
PHP has released security updates to address two critical unauthenticated remote code execution (RCE) vulnerabilities identified as CVE-2026-109618 and CVE-2026-109619, both carrying CVSS v4.0 scores...
PHP2Shell: US NSA warns PHP-based websites of critical vulnerability
The US National Security Agency has issued a critical warning to operators of PHP-based websites about a vulnerability called PHP2Shell that, the agency notes, could...
PHP Vulnerability: Critical Alert May Cause Temporary Outages
Computing Services issued a security alert on October 22, 2026, reporting a critical vulnerability in PHP that affects university servers and websites running outdated or...