Skip to content
Global PHP Vulnerability Forces Shutdown of Canadian Websites

Global PHP Vulnerability Forces Shutdown of Canadian Websites

First seen 22 Oct 2026, 12:13 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 22, 2026 at 12:43 UTC
  • •Critical vulnerability in PHP affects 70% of public-facing websites.
  • •STM and SAQ websites shut down as a precautionary measure.
  • •No breaches detected, but immediate patching is urged by authorities.

On October 21, 2026, multiple Canadian government websites and apps, including STM and SAQ, went offline due to a critical vulnerability in PHP, a programming language used by 70% of public-facing sites. The vulnerability poses significant risks, including potential data theft and system compromise. The Canadian Centre for Cyber Security and other agencies have urged immediate patching of affected systems. Minister Evan Solomon confirmed the shutdowns were precautionary, with no breaches reported in the affected systems. The PHP Security Team has released updates to address these vulnerabilities, which were uncovered by AI agents in August. The situation reflects a global issue, prompting similar actions from other countries and organizations.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-21
Canadian websites shut down
STM and SAQ websites went offline due to a critical PHP vulnerability affecting global sites.
Ctvnews.Ca
2026-10-21
Minister confirms precautionary measures
Evan Solomon stated that government websites were taken offline to protect systems and information.
Cp24
2026-10-21
PHP vulnerabilities identified
The PHP Security Team released updates addressing critical vulnerabilities that could lead to exploitation.
Ctvnews.Ca

More articles in this cluster (2)

Following this threat?

Track Government Of Canada in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (11)

1 / 2

Common questions

What specific vulnerabilities are involved?
The vulnerabilities are related to critical flaws in the PHP programming language, affecting many public-facing websites.
Are there any confirmed breaches?
No breaches have been detected in the affected systems, but the shutdowns are precautionary.
What actions should organizations take?
Organizations should apply the PHP security updates immediately to mitigate risks associated with the vulnerabilities.