Tbsnews Bangladesh Bank Website Offline Due to PHP Vulnerabilities
Article Content
- •Bangladesh Bank's website has been offline since October 22 due to PHP vulnerabilities.
- •The vulnerabilities could allow attackers to execute unauthorized commands on servers.
- •Several commercial banks have also suspended online services as a precaution.
Bangladesh Bank's website has been offline since October 22, 2026, due to critical security vulnerabilities in the PHP programming language that could allow unauthorized remote command execution. The central bank is conducting a risk assessment to ensure the security of its systems before restoring access. This precautionary measure follows a global alert regarding the PHP flaws, which have affected various institutions worldwide. Technical teams are actively working to patch these vulnerabilities, and several commercial banks with PHP-based websites have also suspended their online services. The Bangladesh Government Computer Incident Response Team has issued a security alert advising organizations to audit their servers for PHP usage and apply necessary patches. The specific vulnerabilities have not been detailed in the articles, but the situation is being monitored closely by the bank's IT department.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Bangladesh Bank in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What specific vulnerabilities are affecting the website?
How long will the website be offline?
Are other institutions affected by these vulnerabilities?
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…