The NCSC is encouraging UK organisations to prepare for immediate updating of systems using PHP.
Critical security issue affecting PHP
About this summary. This is a short excerpt from the description that NCSC UK published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://www.ncsc.gov.uk/news/critical-security-issue-affecting-php
Source attribution: headline and facts are from NCSC UK (ncsc.gov.uk). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
NCSC-2026-0443 [1.00] [H/H] Kwetsbaarheden verholpen in PHP
PHP heeft twee kritieke kwetsbaarheden verholpen. De kwetsbaarheden kunnen zonder authenticatie op afstand worden misbruikt voor het uitvoeren van willekeurige code…
Prepare yourselves: PHP to release emergency fixes for 2 critical vulnerabilities
Update, 10/21/2026, 9:55 a.m.: The patches have been released, with fixes shipped as versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35, covering the supported branches, 8.2…
[0day-rubbish] Maian Pal 2.1 product image upload with no extension allow-list to PHP webshell and www-data uid 33 code execution (7.2, PR:H)
Posted by disclosure via Fulldisclosure on Oct 15 0day Rubbish Research Team is publicly disclosing a vulnerability in Maian Pal 2.1, the self-hosted PHP shopping-cart…
[0day-rubbish] Maian Guardian 2.1 license generator projid command injection to www-data uid 33 code execution (7.2, PR:H)
Posted by disclosure via Fulldisclosure on Oct 15 0day Rubbish Research Team is publicly disclosing a vulnerability in Maian Guardian 2.1, the self-hosted licensing…
China-linked malicious actors called out by UK and international partners for targeting sensitive data globally
Joint advisory with international partners highlights malicious targeting of organisations from a range of sectors across the globe.
Shadow AI explained: The work shortcut that could leak your company’s secrets
Using an AI chatbot, assistant, or browser to speed up your work is tempting, but doing it without your employer’s knowledge can put sensitive data at risk. You’re…