Skip to content
Sign in

Technology

PHP

Stable
//

This week

8 verified changes this week.

01

Recent changes

  • Critical PHP vulnerabilities discovered via AI demonstrationSecurity researchers used an OpenAI model to uncover two critical flaws in PHP, a language powering much of the web, prompting urgent patching by companies and government agencies.Developing2 sources · 3 evidence2026-10-25 09:33
  • Critical PHP Vulnerabilities Force Travel Companies and Agencies to Take Sites OfflineCritical security flaws in the PHP programming language, known as "php2shell", prompted travel companies and public agencies to shut down or suspend parts of their websites and services to prevent potential attacks. Major operators such as All Nippon Airways, Japan Airlines, East Japan Railway, and the Port of Rotterdam temporarily disabled services, while government sites in Belgium, Germany, the Netherlands, and Japan also went dark. Cybersecurity agencies urged immediate patching or site shutdowns, and Cloudflare reported millions of exploit attempts.StableServices1 sources · 10 evidence2026-10-28 18:00
  • Attempts to attack from 4 days after the disclosure of PHP vulnerability were confirmed.Attempts to attack were detected four days before a major vulnerability in PHP was disclosed, and Amazon used the honeypot server 'MadPot' to monitor and captured multiple attacks.Stable1 sources · 5 evidence2026-10-23 14:13
  • PHP2Shell vulnerability exposes millions of servers to remote code executionOn October 21, 2026, two critical PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619) disclosed as 'PHP2Shell' allow unauthenticated remote code execution. Over 5.1 million internet-facing PHP hosts are potentially affected, posing severe risk to critical infrastructure. QiAnXin's 'Tianji' AI penetration testing system offers a one-click assessment solution.Stable1 sources · 20 evidence2026-10-23 11:03
  • PHP vulnerability triggers global website repairs, hacker attacks in millionsA serious vulnerability has been discovered in the PHP programming language, prompting emergency repairs on websites across multiple countries worldwide. Hackers have attempted attacks millions of times.Stable1 sources · 3 evidence2026-10-23 09:30
  • Critical PHP vulnerabilities trigger emergency maintenance across JapanPHP developers disclosed two high-severity vulnerabilities (CVSS 9.2) on October 20, 2026, with patches scheduled for October 21. Major Japanese services including Sakura Internet, Cygames, and pixiv announced emergency maintenance. CERT-EU flagged the CVEs; remote code execution is possible if exploited.Developing3 sources · 4 evidence2026-10-21 20:40
  • Critical PHP Vulnerabilities Affecting Websites GloballyTwo severe vulnerabilities in PHP have led to the temporary shutdown of several popular websites and services, including DeviantArt and 4Chan, due to the language’s widespread use and lack of support for older versions.Stable1 sources · 4 evidence2026-10-22 23:12
  • PHP Major Flaw Discovered, Affecting 70% of Websites WorldwideA serious flaw was found in the programming language PHP, and Prime Minister Kishida also called for the application of a patch.Stable1 sources · 1 evidence2026-10-22 20:02
  • Hackers Targeted PHP Before Flaws Were KnownCybersecurity researchers at Amazon.com Inc. reported that hackers attempted to exploit security vulnerabilities in PHP several days before the flaws were made public.Stable1 sources · 1 evidence2026-10-22 18:43
  • PHP releases urgent security update to fix critical vulnerabilityThe PHP development team released versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35, fixing two vulnerabilities with CVSS v4.0 severity scores of 9.2: CVE-2026-109618 and CVE-2026-109619, which allow remote code execution by unauthenticated attackers.Stable1 sources · 28 evidence2026-10-22 09:53
  • PHP reveals two major security vulnerabilities, with a severity score of 9.2PHP discovers two high-risk vulnerabilities, with a severity score of 9.2, which could be exploited for remote code execution, data theft, or service disruption. Trend Micro recommends that enterprises patch the vulnerabilities as soon as possible.Stable1 sources · 4 evidence2026-10-22 15:56
  • Hong Kong watchdog warns of critical PHP vulnerabilitiesHong Kong’s Computer Emergency Response Team issued an ‘extremely high risk’ warning over two critical flaws in PHP, urging website operators to update to prevent remote code execution and server control by hackers.Stable1 sources · 4 evidence2026-10-22 14:37
  • PHP Vulnerability Triggers Global Internet Emergency MaintenanceTwo critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) were discovered, leading to the emergency shutdown of services by multiple governments and internet platforms worldwide, and the PHP official released an urgent update.Stable1 sources · 11 evidence2026-10-22 13:58
  • The MIIT issued a risk warning about the PHP remote code execution critical vulnerability.The Ministry of Industry and Information Technology's Cybersecurity Threat and Vulnerability Information Sharing Platform (NVDB) found two remote code execution critical vulnerabilities in PHP, and it is recommended that relevant units and users take protective measures immediately.Stable1 sources · 6 evidence2026-10-22 14:22
  • PHP Vulnerabilities Spark Global Cyber-Security AlertSerious flaws in PHP, a widely used programming language, were discovered by AI, prompting a global cyber-security alert and urging website operators to update or take platforms offline.Stable1 sources · 6 evidence2026-10-22 11:48
  • PHP Foundation acknowledges that the delay in fixing a major security vulnerability is a structural failure.The PHP Foundation acknowledged that the correction work had stalled after a major security vulnerability was discovered in 2024, and it was deemed a structural failure. The corrected version was released on October 21, 2026.Stable1 sources · 2 evidence2026-10-22 11:56
  • Multiple Governments and Organizations Take Websites Offline to Address PHP VulnerabilityMany websites were taken down as a precaution or for preventative maintenance due to a critical web vulnerability in PHP, an open-source programming language. Governments and organizations, including the Dutch, French, Danish, Finnish, and UK cybersecurity agencies, advised users to update their sites or take them offline.Stable1 sources · 3 evidence2026-10-22 09:44
  • Critical PHP Vulnerabilities Discovered by AITwo severe vulnerabilities in PHP, a language powering over 33 million websites, were found by AI tools from OpenAI and Google’s Wiz. The NSA warned that unpatched sites should be taken offline.Stable1 sources · 6 evidence2026-10-22 01:59
  • Critical Security Flaws in PHP Expose Websites GloballyGovernment agencies and companies worldwide shut down websites after two critical security flaws in PHP, a widely used programming language, were exposed by security firms.Stable1 sources · 3 evidence2026-10-22 06:10
  • Critical PHP Vulnerabilities Expose 70% of Websites to CyberattacksTwo critical PHP vulnerabilities, rated 9.2 out of 10, have been discovered, affecting 70% of websites. OpenAI’s GPT-5.6 Sol model helped identify the flaws, and PHP has released emergency patches.Stable1 sources · 7 evidence2026-10-22 04:19