CYBER CODE RED

Get real-time updates on Telegram

PHP releases emergency fixes as some of the world's biggest websites say they were targeted by hackers

PHP released fixes for two critical remote code execution flaws and urged immediate patching. Security researchers and Cloudflare reported early exploitation attempts before patches became available. Millions of internet-facing PHP installations may be at risk, especially unsupported legacy versions. PHP has released patches for two critical remote code execution (RCE) vulnerabilities and “strongly encouraged” all users to apply them as soon as possible, as hackers are starting to abuse the flaws in real-life attacks.

Published 22-Oct-2026 09:47 UTC · First seen 22-Oct-2026 09:43 UTC

Sources