NSA Warns of Two Critical PHP Vulnerabilities: Update or Take Systems Offline
seanmcdonaldxyz · x · 2026-10-21
NSA issued an effective-immediately advisory: all organizations running PHP should prepare to patch two critical vulnerabilities. These flaws often provide a direct path to the server's file system or database. If immediate patching isn't feasible, systems should be taken offline until fully mitigated; NSA will follow up with specific guidance.
More from Safety
- LiteLLM supply chain attack, PHP flaws found by GPT-5.6: AI is making hacking faster and cheaper — Yuchenj_UW · 2026-10-21
- php2shell credit war: @lcfr_hax confirmed as first to find and exploit the PHP bug class — basedjensen · 2026-10-21
- Indian CA used "4" as a private key; GPT-5.6 Sol-discovered PHP bug took down Pixiv and government sites — op7418 · 2026-10-21
- Researcher calls for independent tests of claims Chinese models write insecure code — dbreunig · 2026-10-21
- China Fines Firms for Poisoning AI Chatbot Answers With Fabricated Content — Sanbi_Ai · 2026-10-21
- FBI alerts on two critical PHP RCE flaws, CVSS 9.2, patch immediately — burny_tech · 2026-10-21