PHP Security Flaws Raise Concerns About Colombian Government Websites

Two critical security flaws in PHP have prompted emergency updates and temporary service shutdowns across the globe, according to a report by public domain sources. The popular programming language, which powers millions of websites, includes a critical flaw that could allow attackers to execute commands on vulnerable servers without authentication.

Colombia's cybersecurity response team reported that 8,699 internet-facing services use PHP, highlighting the scale of the issue. The vulnerabilities received a score of 9.2 out of 10 on the scale used to assess software flaws, placing them in the critical category. While the investigation did not confirm any successful attacks against Colombian government institutions, it identified approximately 170 server records associated with these domains that advertised PHP.

Experts recommend that organizations running affected installations immediately apply the relevant updates to mitigate the risks.