PHP security flaws send websites offline worldwide: Which services were affected?

Reports of two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, prompted government agencies, online platforms and other organizations to temporarily take websites offline or restrict services while applying security updates. The flaws, collectively known as PHP2Shell, could allow attackers to execute code remotely on vulnerable servers without authentication. PHP released security fixes on October 21, 2026. […]

The post PHP security flaws send websites offline worldwide: Which services were affected? appeared first on Insider Paper.