Critical PHP Flaws Threaten Millions of Websites in New AI Security Test
Summary
Two serious security problems in PHP, a common internet technology, could let hackers take control of websites or access private data. The problems affect many versions of PHP, and website owners must update their PHP software quickly to fix the issue.Key Facts
- PHP is a technology used on about 70% of websites worldwide.
- Two security flaws, called CVE-2026-109618 and CVE-2026-109619 or “PHP2Shell,” have a high severity rating of 9.2 out of 10.
- These flaws allow hackers to run harmful commands on servers or reach sensitive information.
- The U.S. National Security Agency recommends updating PHP immediately or taking offline vulnerable systems.
- PHP versions from 5.4 up to 8.5.11 are affected; fixes are in PHP 8.5.12 and other recent versions.
- AI tools helped researchers find and fix these vulnerabilities.
- Popular web platforms like WordPress, Drupal, Joomla, and others are impacted.
- Website owners must update PHP to fully protect their systems since the flaws are in PHP itself, not just in website code.
Read the Full Article
This is a fact-based summary from The Actual News. Click below to read the complete story directly from the original source.
