Technology · 2026-10-21 · Nachmittagsausgabe

Critical PHP flaws trigger emergency patches and website shutdowns

The PHP Foundation has issued emergency patches for two critical vulnerabilities affecting millions of websites using the popular programming language. The flaws, rated 9.2 out of 10 for severity, impact all PHP installations dating back to version 5, released in July 2004. They allow unauthenticated attackers to execute code on servers or read sensitive data such as passwords and API keys.

Internet infrastructure firm Cloudflare reported observing early attacks even before the fixes were officially released. In response, several organisations took their websites offline as a precaution, including multiple Finnish and French government portals and the website for the Port of Rotterdam. Official patches will only be issued for PHP versions 8.2 and newer, leaving many older websites unprotected.

The vulnerabilities were independently discovered by three separate entities: security firms Wiz and Calif, and OpenAI. Wiz stated its researchers used AI tools as part of the discovery, a technology that also dramatically shrinks the window for system administrators to apply patches before attackers can develop and launch exploits.

Zusammenfassung von Cup of News mit KI aus den unten genannten Quellen. Den vollständigen Beitrag finden Sie im Original.

Quellen lesen

• PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert
• PHP Releases Emergency Fixes for Two Critical RCE Flaws
• ‘This Is Not A Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire
• PHP warns admins of two critical flaws, emergency patches coming tomorrow
• Critical PHP Security Warning Issued—Apply Emergency Patch Today

Weitere Meldungen dieser Ausgabe

1. Russia frees US citizen as Trump envoy meets Putin
2. Iran says indirect U.S. talks on ceasefire proposal continue
3. Heatwaves put one billion children at risk, WHO warns
4. Turkey, Qatar, Pakistan and Indonesia forge 'Badr' arms pact
5. Russian Su-30 fighter crashes in Kaliningrad exclave
6. South Korea: Crowds watch third rescue of stranded shark
7. Argentine whale sanctuary sees record die-off
8. US physicists trap a single positron for months
9. Kazakh artist brings nomadic textiles to Frieze London

Ganze Ausgabe lesen