Critical PHP Vulnerabilities Exploited in the Wild, Widespread Patching Required
Two critical flaws in the PHP core allow remote attackers to gain full server control; widespread website outages reported
Key Takeaways
- Two critical vulnerabilities in the PHP core are being actively exploited in the wild.
- Working exploits are available, allowing remote attackers to gain full server control.
- Approximately 70 percent of websites running unpatched PHP core software are at risk of widespread outages.
- Administrators should update PHP core software to the latest patched versions immediately.
- Expected service disruptions include 404 or 'Page Not Found' errors during emergency patching.
Quick answers
- What happened?
- Security researchers have identified two critical vulnerabilities in the PHP core software that are being actively exploited in the wild. The flaws allow remote attackers to seize full control over affected servers. Approximately 70 percent of websites running unpatched PHP core software are expected to experience outages, including 404 or 'Page Not Found' errors, as administrators apply emergency patches. Working exploits are available, and the vulnerabilities have been reported as already being used by attackers.
- What should defenders do?
- Update PHP core software to the latest patched version immediately. Apply emergency patches as released by PHP maintainers. Monitor official advisories for version-specific guidance.
According to recent reporting, two critical vulnerabilities in the PHP core software are being actively exploited in the wild. The flaws permit remote attackers to gain full control over affected servers. Experts indicate that working exploits are available and that the vulnerabilities are already being used by malicious actors. Approximately 70 percent of websites running unpatched PHP core software may experience widespread outages, with many serving '404' or 'Page Not Found' errors. Website administrators are urged to update their PHP core software to the latest patched versions immediately to mitigate the risk of server compromise and service disruption. The severity of the flaws and the availability of working exploits underscore the urgency of applying emergency patches across affected environments.
Security Details
Two critical vulnerabilities in the PHP core software allow remote attackers to gain full control over affected servers. Working exploits are available and the flaws are being actively exploited in the wild.
Mitigation
Update PHP core software to the latest patched version immediately. Apply emergency patches as released by PHP maintainers. Monitor official advisories for version-specific guidance.
Sources
Krebs on Security
Widespread PHP Flaw May Cause Many Site Outages Today
Oct 21, 2026 · 15:26
Original link
Related Security News
OVHcloud GitHub Compromise Attributed to GlassWorm Threat Actors
A developer's GitHub account, compromised several months prior to discovery, was leveraged by GlassWorm threat actors to push malicious code to unsuspecting users. The incident ties back to OVHcloud infrastructure and highlights ongoing supply chain risks within the developer ecosystem.
