Inside Critical PHP Vulnerabilities That Have 70% Of The Internet At Risk
A pair of critical vulnerabilities in PHP, the open-source programming language that powers much of the modern web, has forced…
Two critical vulnerabilities in PHP, the open-source programming language powering much of the modern web, have left 70% of the internet at risk. OpenAI's AI, GPT-5.6 Sol model, and Google's cybersecurity firm Wiz independently identified the flaws, which could grant attackers direct access to server file systems or databases. The vulnerabilities, rated 9.2 on the CVSS severity scale, exploit deep memory-handling mechanisms in PHP's core, enabling unauthenticated attackers to bypass security checks and execute arbitrary code.
With every version of PHP since 5 affected, organizations using PHP-based websites, apps, and APIs face significant risks. India, with its widespread use of PHP, may suffer the most as many government portals, educational institutions, and small businesses rely on outdated PHP versions. The recommended fix is to upgrade to PHP 8.5.12, but the multi-month remediation timeline has been expedited due to leaked proof-of-concept details.
India's CERT-In has issued an advisory warning of high risks of remote code execution and complete system compromise.
Written by urgent.news from Inc42's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
