Hundreds of websites went offline due to critical PHP vulnerabilities that allowed for remote code execution. The maintainers of PHP released urgent patches.
The vulnerability or weakness
| CVE | CVSS | Severity | In CISA KEV | KEV due date |
|---|---|---|---|---|
| CVE-2026-109618 | 9.2 | CRITICAL | No | - |
| CVE-2026-109619 | 9.2 | CRITICAL | No | - |
CVE data: NVD (nvd.nist.gov) and the CISA Known Exploited Vulnerabilities catalog.
Earlier attacks and coverage
No earlier related attack in our archive yet.
Business impact
Organizations faced disruptions in operations, potential data loss, and increased risk of cyberattacks. Some took preventive measures by temporarily shutting down services.
Industries affected
The incident affected a wide range of industries, including government agencies, large companies, and enterprises running PHP-based applications.
Users affected
Website administrators and users experienced downtime and were advised to ensure their systems were updated to mitigate risks. Some users saw their services taken offline as a precaution.
