Particle.news
Get it on Google Play
Download on the App Store
31 ARTICLES
·
18h ago

Critical PHP Flaws Force Global Patch Race and Widespread Website Shutdowns

Public disclosure fueled rapid AI‑assisted exploit development, leaving organizations racing to patch or isolate vulnerable servers.

El sitio web de The PHP Foundation se ha actualizado a la versión más reciente de PHP. Una vulnerabilidad de seguridad grave, recién descubierta, está comprometiendo los cimientos de numerosos sitios web y servicios en línea en todo el mundo
La alerta de seguridad llevó a distintas organizaciones a suspender temporalmente el acceso público a sus páginas mientras preparaban la actualización de sus sistemas. La medida buscaba reducir el riesgo de intrusiones antes de instalar los parches. Foto: Pexels.
1. Qué pasó con las páginas web de varios gobiernos y cuál es el riesgo de las fallas en PHP.
Alerta informática en la UB.

Overview

  • Security teams disclosed two critical PHP vulnerabilities tracked as CVE-2026-109618 and CVE-2026-109619 that allow unauthenticated remote code execution by exploiting memory‑handling errors.
  • The PHP project published emergency patches Wednesday and urged immediate updates because the fixes are the only full remediation for the flaws.
  • National cyber agencies including the NSA, CERT‑EU and multiple national CERTs advised organizations to apply patches or disconnect exposed systems, and many governments and institutions temporarily took sites offline as a precaution.
  • Cloudflare and other security firms reported exploit attempts surged from thousands to millions after technical details leaked before the planned release, increasing urgency for rapid patching.
  • Researchers say AI tools helped discover and analyze the flaws but also shortened the window for defenders by accelerating exploit creation, leaving shared‑hosting and legacy deployments as the hardest to secure and likely to remain exposed while remediation continues.