{
  "id": 15958396,
  "title": "Inside Critical PHP Vulnerabilities That Have 70% Of The Internet At Risk",
  "url": "https://urgent.news/2026/10/21/inside-critical-php-vulnerabilities-that-have-70-of-the-internet-at",
  "topic": "business",
  "section": "Business",
  "published": "2026-10-21T21:29:50.000Z",
  "source": {
    "name": "Inc42",
    "slug": "inc42",
    "url": "https://inc42.com/features/inside-critical-php-vulnerabilities-that-have-70-of-the-internet-at-risk/"
  },
  "original_language": "en",
  "account": "Two critical vulnerabilities in PHP, the open-source programming language powering much of the modern web, have left 70% of the internet at risk. OpenAI's AI, GPT-5.6 Sol model, and Google's cybersecurity firm Wiz independently identified the flaws, which could grant attackers direct access to server file systems or databases. The vulnerabilities, rated 9.2 on the CVSS severity scale, exploit deep memory-handling mechanisms in PHP's core, enabling unauthenticated attackers to bypass security checks and execute arbitrary code. With every version of PHP since 5 affected, organizations using PHP-based websites, apps, and APIs face significant risks. India, with its widespread use of PHP, may suffer the most as many government portals, educational institutions, and small businesses rely on outdated PHP versions. The recommended fix is to upgrade to PHP 8.5.12, but the multi-month remediation timeline has been expedited due to leaked proof-of-concept details. India's CERT-In has issued an advisory warning of high risks of remote code execution and complete system compromise.",
  "summary": "A pair of critical vulnerabilities in PHP, the open-source programming language that powers much of the modern web, has forced…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}