State issues urgent cybersecurity alert over critical PHP vulnerabilities
The Kenyan government has issued an urgent cybersecurity alert regarding two critical vulnerabilities in the PHP programming language. Public institutions are directed to identify affected systems and prepare for immediate security updates to prevent potential remote code execution.
Why it matters
PHP powers a vast portion of the internet; unpatched vulnerabilities pose a significant risk to the integrity of public digital infrastructure.
State Department for ICT and the Digital Economy PS John Tanui/HANDOUT The government has issued an urgent cybersecurity alert to public institutions over two critical vulnerabilities affecting PHP, a widely used programming language that powers websites, web applications and digital public service platforms.
In an advisory issued by the State Department for ICT and the Digital Economy in collaboration with the ICT Authority, government agencies were directed to identify potentially affected systems and prepare to install security updates released by the PHP security team.
The two vulnerabilities have each been rated 9.2 on the Common Vulnerability Scoring System (CVSS), indicating a critical security risk.
According to the advisory, the flaws could expose affected systems to remote code execution, potentially allowing attackers to execute malicious code on vulnerable servers.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in