WordPress says the flaws are not specific to it and affect any server running PHP.
The code vulnerability could allow attackers to take over servers, experts say.
PHP is an open-source, server-side scripting language widely used to build dynamic websites and web applications. It helps ...
Crucial vulnerabilities in the PHP language is so severe that global authorities have recommended websites temporarily go ...
A screen displays the unavailable French government website, info.gouv.fr, as cyber agencies warn that websites may be taken ...
Two critical PHP remote code execution vulnerabilities will be patched in an emergency release on October 21. Fixes are only expected for supported PHP 8.x branches.Key takeawaysCVE-2026-109618 and ...
Some organizations have temporarily taken websites and online services offline rather than leave vulnerable systems exposed.
On the night of October 21, a patched version of PHP was released. It is commonly referred to as "php2shell." There are two ...
Two critical PHP flaws enable potential unauthenticated remote code execution. See the fixed versions and how to protect ...
PHP patches two critical RCE flaws affecting web servers as Cloudflare reports early exploit attempts, with no confirmed ...
It said users were strongly encouraged to update immediately.
Two critical vulnerabilities in PHP are facing active exploitation attempts, creating an urgent need for widespread patching, according to cybersecurity researchers.