US Government Warns Critical PHP Flaws Threaten Majority of Web Servers
· Technology · India Today, Indian Express
Two newly discovered cybersecurity vulnerabilities in the PHP programming language could expose nearly 70 per cent of websites worldwide to remote attacks. Nicknamed PHP2Shell, the flaws allow attackers to gain unauthorized control of web servers without prior access. The US National Security Agency and the FBI issued urgent advisories on October 22, 2026, recommending that affected organizations take vulnerable systems offline if immediate patching is not feasible. The PHP Foundation released an emergency security patch on October 21 after researchers identified the vulnerabilities, rating them 9.2 out of 10 in severity. The flaws could allow malicious actors to steal sensitive database records, deploy malware, or disrupt critical online services.
Why it matters
Millions of websites powered by WordPress and Wikipedia face potential security breaches unless administrators apply the emergency patches immediately.
Read the original report — India Today
Join us on Telegram
Breaking news the moment it lands. At 10,000 members we ship the Android app.