NSA urges PHP users to patch two critical vulnerabilities or go offline
AnnaCiaunica · x · 2026-10-22
The NSA warned all organizations using PHP to prepare for an update fixing two critical vulnerabilities that often provide a direct path to the server's filesystem or database. If immediate patching isn't feasible, the agency recommends taking systems offline until fully mitigated, with more specific guidance to follow.
More from Safety
- Researcher warns GitLab flaw is 'really bad,' urges users to patch now — basedjensen · 2026-10-22
- RCE free-for-all feels like 2000 again, vet says, pointing to PHP2Shell race bugs — moyix · 2026-10-22
- Microsoft: Storm-0940 used agentic AI framework ARTEX to attack hundreds of orgs — basedjensen · 2026-10-22
- Amid rising cyberattacks, a 6-step personal security checklist worth doing today — peterwildeford · 2026-10-22
- GPT-5.6 Sol and Gemini 4 Argon both found a critical PHP flaw affecting millions of sites — The Decoder · 2026-10-22
- 136-Country, 118M-Article Dataset Audits State Media Share in LLM Training Corpora — deliprao · 2026-10-22