TechCritical PHP vulnerabilities could take websites offline today

PHP is expected to release a patch today for two critical vulnerabilities rated 9.2 out of 10. Researchers say they affect PHP 5 and later and may put more than 1.3 million internet-connected hosts at risk. Agencies urge organizations unable to patch immediately to isolate exposed apps or take them offline. Cloudflare says early attacks are emerging and it has temporarily changed firewall rules.

PHP vulnerabilitiescybersecuritywebsitessecurity patch

TThe Verge★★★★☆2026-10-21 11:49Original