EU Website Outages Follow Critical PHP Flaws

Two critical vulnerabilities in PHP have prompted government agencies across Europe to temporarily shut down websites, as administrators rush to protect vulnerable servers from potential cyberattacks.

The flaws, tracked as CVE-2026-109618 and CVE-2026-109619, could allow attackers to execute malicious code on affected servers without login credentials. Both carry severity scores of 9.2 under CVSS v4.0, according to Google Cloud’s security analysis.

Emergency patches were released on Oct. 21, giving organizations a way to address the vulnerabilities. However, the precautionary shutdowns show how security flaws in widely used software can disrupt essential services even without a confirmed breach.

• Government websites go offline amid PHP security concerns
• How the two PHP vulnerabilities work
• Which PHP versions need updating?
• Why businesses should check their PHP applications
• What IT teams should do now
• What the PHP security scare means for IT leaders

Government websites go offline amid PHP security concerns

Government agencies in the...

Copyright of this story solely belongs to www.techrepublic.com. To see the full text click HERE