Reply to thread

Message: <blockquote data-quote="uthpalakalwana" data-source="post: 31670724" data-attributes="member: 133453">Patches have been released to address two critical vulnerabilities affecting PHP, a widely used technology that underpins many websites and web applications. ASD's ACSC recommends organisations:<ul> <li data-xf-list-type="ul">Identify PHP within their environments</li> <li data-xf-list-type="ul">Review the latest PHP guidance at <a href="https://www.php.net/index.php" target="_blank">https://www.php.net/index.php</a></li> <li data-xf-list-type="ul">Apply available security updates and other appropriate mitigations</li> <li data-xf-list-type="ul">Monitor PHP applications and related systems for suspicious activity.</li> </ul>PHP Foundation released advanced notice yesterday of two critical vulnerabilities in PHP, with full details publicly announced on Thursday 22 October 2026 at 0100 AEDT. PHP is a widely used general purpose scripting language, often utilised in Web Applications. This alert is intended for technical teams responsible for network security, asset management, and system administration across all sectors. It is also intended to inform individuals operating PHP workloads, websites and applications. Background PHP Foundation have published advanced notice of critical vulnerabilities; organisations are recommended to monitor for the release of relevant patches to address these vulnerabilities. The Australian Signals Directorate's Australian Cyber Security Centre (ASD's ACSC) is aware of related media reporting which identifies these vulnerabilities as CVE-2026-109618 and CVE-2026-109619, though no official technical details have been publicly released at this time. ASD’s ACSC understands that all PHP versions from PHP 5 onwards may be affected. ASD’s ACSC is currently not aware of active exploitation related to these vulnerabilities Mitigation advice ASD’s ACSC advises individuals and organisations to:<ul> <li data-xf-list-type="ul">Identify PHP within their environments.</li> <li data-xf-list-type="ul">Monitor and review PHP official guidance at <a href="https://www.php.net/index.php#2026-10-20-1" target="_blank">PHP Security Release</a></li> <li data-xf-list-type="ul">Prepare to update and apply security patches as they become available.</li> <li data-xf-list-type="ul">Monitor PHP applications and associated environments for potentially malicious activity.</li> </ul></blockquote>

Verification: Nawa warak dahaya keeyada? (Namaya wadi kireema dahaya)

Top Bottom