ASD rushes out ‘critical’ alert on unpatched PHP vulnerability
The Australian Signals Directorate has issued a critical alert regarding an unpatched security vulnerability affecting PHP versions 5 and later. Organizations are urged to monitor for upcoming patches addressing CVE-2026-109618 and CVE-2026-109619 after details leaked prematurely.
Why it matters
PHP powers a massive share of the world's web infrastructure, making unpatched critical vulnerabilities a severe risk for global cyber security and enterprise operations.
Facebook X LinkedIn Bluesky Copy to Clipboard Copy Communications / Tech / AI
Prefer The Mandarin AAP Image/Lukas Coch The Australian Signals Directorate has put Australian government agencies and businesses on high alert over an unpatched security hole in the almost endemic web scripting language PHP that jumped the fence into the wild before a fix was released.
The top-level alarm was rung on Wednesday afternoon, with ASD saying that “PHP Foundation has published advanced notice of critical vulnerabilities; organisations are recommended to monitor for the release of relevant patches to address these vulnerabilities”.
Headlinne story · 7 newsrooms
Global Websites Go Dark After AI Uncovers Critical Programming Language Flaws
What every outlet reported, where they differ, and how each framed it →
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in