Skip to content
Sign in
StableReported 2026-10-22 14:37

Hong Kong watchdog warns of critical PHP vulnerabilities

Hong Kong’s Computer Emergency Response Team issued an ‘extremely high risk’ warning over two critical flaws in PHP, urging website operators to update to prevent remote code execution and server control by hackers.

Why it matters. Website operators and users are at risk from potential cyber attacks, as the vulnerabilities could be exploited to take control of servers.

01

Who and what it touches

WordPressusesDrupalusesApache 2usesDrupalusesJoomlausesWebsitesenablesMagentoenablesmemoryusesPHP

Into PHP

From PHP

Each line is a relation with evidence behind it, drawn in the direction it points. A line shows that two things are connected, not how far this change reaches.

02

Evidence

  • SSouth China Morning Post worldMedia2026-10-22 14:37
    View source