Website admins across the world bracing for impact following major PHP flaw reveal
- PHP discloses two critical remote code execution vulnerabilities that could enable website takeover and data theft
- Details leaked before patch release, prompting an early security advisory and urgent upgrade warning
- Researchers confirmed the flaws are real, with widespread impact expected across multiple PHP versions
PHP, arguably the most popular programming language for websites and web applications in the world, contains two critical-level vulnerabilities that could expose countless sites to remote code execution (RCE) attacks, the provider has revealed.
The flaws could lead to website takeovers, data theft, malicious redirects, and a whole swathe of similarly sinister situations.
Security rush hour
PHP published a new security advisory, giving admins a “heads up” on an incoming patch.
“The PHP security team would like to give advance notice of an upcoming security release,” the advisory reads.
“It is scheduled for Wednesday, 21 October 2026 at 14:00 UTC. It addresses two critical vulnerabilities, both...
Copyright of this story solely belongs to www.techradar.com. To see the full text click HERE
