Skip to content
India and Canada Address Critical PHP Vulnerabilities Affecting Thousands of Websites

India and Canada Address Critical PHP Vulnerabilities Affecting Thousands of Websites

First seen 23 Oct 2026, 15:43 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 23, 2026 at 18:15 UTC
  • •60,000 PHP websites flagged as vulnerable in India.
  • •Canada reported critical PHP vulnerabilities with potential for unauthorized access.
  • •Both countries are prioritizing security updates and monitoring for exploitation.

India's cybersecurity agency identified 60,000 vulnerable PHP websites, alerting operators to upgrade to patched versions. The vulnerabilities could allow unauthorized command execution on affected systems. The Indian Computer Emergency Response Team (CERT-In) advised immediate patching and mitigation measures. Meanwhile, the Canadian government also reported two critical vulnerabilities in PHP, with updates being applied to secure their systems. No exploitation or incidents have been confirmed in either country as of now. The Canadian Centre for Cyber Security is monitoring the situation closely. Both nations emphasize the urgency of addressing these vulnerabilities to prevent potential cyberattacks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-21
CERT-In issues vulnerability note
CERT-In advised organizations to apply security updates for critical PHP vulnerabilities affecting numerous websites.
Newindianexpress
2026-10-22
Canada acknowledges PHP vulnerabilities
The Government of Canada reported critical vulnerabilities in PHP, urging immediate updates to prevent unauthorized access.
Canada.Ca
2026-10-23
India flags 60,000 vulnerable PHP sites
India's cybersecurity agency alerted operators of 60,000 vulnerable PHP sites, emphasizing the need for immediate patching.
Newindianexpress

More articles in this cluster (2)

Extracted Entities (6)

1 / 3

Common questions

What are the specific vulnerabilities?
The vulnerabilities affect PHP installations that could allow unauthorized command execution under certain conditions.
How many websites are affected?
India has flagged 60,000 vulnerable PHP websites, while Canada has not specified a number but acknowledges critical vulnerabilities.
What actions should organizations take?
Organizations should prioritize upgrading to the latest patched version of PHP and follow CERT-In's mitigation measures.