Cybersecurity agencies warn of two critical PHP flaws that could compromise web servers
Cybersecurity agencies in the United States, Spain, Germany, the Netherlands, the United Kingdom and other countries warned about two critical vulnerabilities in PHP, rated 9.2 out of 10 for severity. The flaws could allow remote code execution, access to confidential information and takeover of servers, even without prior authentication. The NSA recommended temporarily isolating exposed systems when patches cannot be applied immediately, and Spain's Incibe classified the alert at the maximum severity level. The main recommendation is to update PHP to a fixed version.
In 40 seconds
- Two critical PHP vulnerabilities were rated 9.2 out of 10 for severity.
- They could allow remote code execution, access to sensitive data and server takeover without prior authentication.
- The NSA recommended temporarily isolating exposed systems if patches cannot be applied immediately.
IASummary generated by artificial intelligence from a story by ELHERALDO.CO. It may contain errors: the original source prevails.




Comments
Be respectful. Comments reported by several people are hidden until a moderator reviews them.
You do not need an account to read, only to comment. Sign in with a code sent to your email or with your Google account. We only show the name you choose, never your email.