MEDIUMVulnerability
Global

Hundreds of websites taken offline as concern grows over two PHP vulnerabilities

·Source: The Record

Updated:

Executive Summary

The maintainers of the globally used PHP scripting language released patches for two vulnerabilities after alerting users that the bugs were severe.

Analysis

The maintainers of the globally used PHP scripting language released patches for two vulnerabilities after alerting users that the bugs were severe.
Source Attribution

Originally published by The Record on Oct 21, 2026.

Related Threats

CRITICALVulnerability

New Serious PHP Vulnerabilities Released and Patched

PHP maintainers have released two critical vulnerabilities: PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to update immediately. Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed. We consider the ris

Schneier on Security
MEDIUMVulnerability

Amazon says PHP2Shell exploitation began 4 days before patches

Security researchers at Amazon Threat Intelligence say attackers began targeting the PHP2Shell flaws four days before security patches were released on Wednesday. [...]

BleepingComputer
MEDIUMVulnerability

Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform

The Amsterdam-based company plans to use the funding for research and development and commercial expansion in Europe and the Middle East. The post Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform appeared first on SecurityWeek .

SecurityWeek