CRITICALAi
Global

Widespread PHP Flaw May Cause Many Site Outages Today

·Source: Krebs on Security

Updated:

Executive Summary

Expect to see quite a few websites serving "404" or "Page Not Found" errors today: Nearly 70 percent of websites need to update their core software to fix a pair of vulnerabilities that allow an attacker to seize full control over affected servers. Experts say there are working exploits for the flaws, and that these critical bugs are already being exploited in the wild.

Analysis

Expect to see quite a few websites serving "404" or "Page Not Found" errors today: Nearly 70 percent of websites need to update their core software to fix a pair of vulnerabilities that allow an attacker to seize full control over affected servers. Experts say there are working exploits for the flaws, and that these critical bugs are already being exploited in the wild.

Indicators of Compromise (2)

CVE (2)
CVE-2026-109618
CVE-2026-109619
Source Attribution

Originally published by Krebs on Security on Oct 21, 2026.

Related Threats