Two critical vulnerabilities in PHP have prompted government agencies, schools, and healthcare organizations across Europe to temporarily take websites offline.
Two critical vulnerabilities in PHP have prompted government agencies, schools, and healthcare organizations across Europe to temporarily take websites offline.
Tracked as CVE-2026-109618 and CVE-2026-109619, the flaws could allow attackers to remotely execute code and access sensitive server data. The NSA and CERT-EU have urged organizations to apply security patches immediately or isolate affected systems until they can be secured.