PHP developers issue patches for critical flaws as global website shutdowns persist
PHP developers have released updates for two critical flaws as organizations worldwide temporarily shut down websites to patch vulnerabilities.
Developers of the PHP programming language have released security updates addressing two critical vulnerabilities that prompted temporary website shutdowns worldwide. Cybersecurity agencies urged organizations to patch systems immediately or take services offline to prevent unauthorized code execution. According to Sweden's CERT-SE, the flaws carry a severity rating of 9.2 out of 10.
The vulnerabilities, reportedly uncovered using artificial intelligence, impacted digital infrastructure across Europe, including government portals in Belgium, Finland, France, Germany, and the Netherlands. Cybersecurity firm Cloudflare reported detecting "millions" of attempted breaches targeting unpatched systems. PHP maintainers acknowledged a delay in addressing one previously identified flaw as system administrators work to deploy emergency fixes.
Sources: BBC News, Cyprus Mail, The Guardian, The Journal, Sweden Herald.
Sources
- Sweden Herald — Critical PHP flaw puts millions of websites at risk, experts urge immediate updates
- The Guardian — Flaw in PHP computer language leads to shutdown of websites around world
- Cyprus Mail — Websites down worldwide as critical cyber-security update issued
- BBC News — Websites taken down worldwide as critical cyber-security update issued
- The Journal — Websites around the world go dark after critical security flaws exposed
Earlier coverage
- Oct 23, 2026, 09:30 AM UTCWebsites taken offline worldwide following critical security flaws in PHP
- Oct 22, 2026, 04:30 AM UTCCritical PHP security vulnerabilities force European websites offline