CERT alert to restrict Internet access to critical, high-risk systems that cannot be updated
Sri Lanka CERT has requested public and private sector organisations, as well as website developers, to pay attention to security vulnerabilities identified in relation to the PHP software commonly used for developing websites and web applications. The text of CERT statement issued yesterday: “Due to the security vulnerabilities referenced by the identification codes CVE-2026-109618 and […]
Sri Lanka's Computer Emergency Response Team (CERT) has issued a directive to limit internet access to essential systems that cannot be updated due to identified security vulnerabilities in the widely-used PHP software. The CERT statement highlights the severe risks associated with the vulnerabilities, including unauthorized system access, data theft, and functionality disruption.
To mitigate the risks, CERT advises organizations and website developers to identify all systems using PHP and verify their running versions. The team emphasizes the importance of immediately updating these systems and web applications according to proper procedures using the software patches released for the security flaws. Updates should be performed using the instructions provided on the official PHP website (https://www.php.net).
Furthermore, CERT recommends checking system logs to monitor for any unusual activity and restricting internet access to critical, high-risk systems that cannot be updated.
Written by urgent.news from The Island Sri Lanka's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
