Security1 hOctober 21, 2026, 18:29

Critical PHP flaws put over half of all websites at risk

Website admins are being urged to apply emergency patches to PHP installs, with more than half of all sites potentially vulnerable to critical new security flaws. Specific CVEs and affected versions were not disclosed.

Forbes

Open source

Critical PHP flaws put over half of all websites at risk

More than half of all websites may be vulnerable
Admins urged to apply emergency PHP patches today
Specific CVEs and affected versions not disclosed

#PHP

PHP warns of two critical flaws, emergency patches due October 21

Security

Cyberattacks on oil tankers put maritime critical infrastructure at risk

Security

Drupal warns of fast exploitation risk for critical core RCE flaws

Security

Critical PHP flaws put over half of all websites at risk

PHP warns of two critical flaws, emergency patches due October 21

Cyberattacks on oil tankers put maritime critical infrastructure at risk

Drupal warns of fast exploitation risk for critical core RCE flaws

ShowDoc 3.9.2 flaw lets username field become PHP code