Skip to content
Critical Vulnerabilities Discovered in PHP Affecting 70% of the Internet

Critical Vulnerabilities Discovered in PHP Affecting 70% of the Internet

First seen 21 Oct 2026, 23:09 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 22, 2026 at 00:10 UTC
  • •Critical vulnerabilities in PHP affect 70% of the internet.
  • •All PHP installations are at risk, with a demonstrated exploit confirmed.
  • •Organizations are advised to isolate vulnerable applications until patches are applied.

Critical vulnerabilities in PHP, a programming language supporting up to 70% of the internet, have led to multiple website outages, including those of Woodie's DIY and the Finnish government. Discovered by AI-driven digital agents, these vulnerabilities prompted PHP to urge users to update immediately. The European Union’s Computer Emergency Response Team (CERT) advised organizations to isolate internet-facing applications until fixes are verified. OpenAI, which led the investigation, described the flaws as among the most significant security issues in recent history. PHP confirmed that all installations are at risk, with a demonstrated exploit allowing unauthenticated requests to trigger attacks. Cybersecurity experts warn that attackers could remotely control websites, steal data, or alter content. The situation is evolving, with technical details being publicly discussed, raising concerns about potential exploitation. Organizations are urged to assess their cyber systems and implement necessary updates.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-21
Vulnerabilities disclosed
PHP announced critical vulnerabilities affecting all installations, prompting immediate updates.
Irishtimes
2026-10-21
EU CERT issues advisory
The EU’s Computer Emergency Response Team advised organizations to isolate affected applications until fixes are verified.
Irishtimes

More articles in this cluster (2)

Following this threat?

Track Google in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (9)

1 / 2

Common questions

What specific vulnerabilities were found?
The vulnerabilities allow unauthenticated requests to trigger attacks, potentially leading to remote control of websites.
How urgent is the update?
The update is urgent as all PHP installations are at risk, and organizations are advised to isolate vulnerable applications.
What should organizations do immediately?
Organizations should update their PHP installations immediately and consider isolating their internet-facing applications.