# Two critical PHP flaws put websites worldwide at risk, with Russia especially exposed

https://mins.news/en/item/111930

- Meduza, 2026-10-22 23:51 UTC
- Tech
- Original: https://meduza.io/en/cards/two-critical-php-vulnerabilities-threaten-websites-worldwide-here-s-why-russia-where-the-language-powers-more-than-90-percent-of-sites-faces-particularly-high-risks

> PHP’s developers disclosed two critical vulnerabilities on October 21, each rated 9.2 on the CVSS scale. They could let attackers execute code remotely on servers without authentication, potentially accessing files and databases or hijacking sites. Nearly 70% of websites use PHP, and developers urge immediate updates; fixes are available for PHP 8.2 and later.

## Stories

- [Critical PHP Vulnerabilities and Cybersecurity Risks](https://mins.news/en/topic/php-critical-vulnerabilities) — Markdown: https://mins.news/en/topic/php-critical-vulnerabilities.md

## Related coverage

- [Services race to update systems after critical PHP flaws discovered](https://mins.news/en/item/111535) — BBC News, 2026-10-22
- [PHP security flaw: Why websites across Europe went dark and what it means for you](https://mins.news/en/item/111060) — euronews, 2026-10-22
- [European government websites taken offline after AI helps find critical PHP flaws](https://mins.news/en/video/109918) — Al Jazeera English, 2026-10-21