Five keys to the cyber crisis caused by two critical PHP flaws
Two critical vulnerabilities in PHP, the programming language behind a large share of websites, triggered a global cyber emergency. PHP developers are working on patches, and European Union cybersecurity authorities advised those unable to apply them to take their web service offline. The flaws were rated 9.2 out of 10 on the CVSS v4.0 scale and would allow unauthenticated remote code execution. Government sites in Europe, Dutch political parties and the Port of Rotterdam went offline.
In 40 seconds
- Two critical PHP vulnerabilities led government sites in various parts of the world, including most of Europe, to go offline.
- The flaws are rated 9.2 out of 10 on CVSS v4.0 and point to unauthenticated remote code execution.
- PHP developers are working on patches; the EU advised taking web services offline for those unable to apply them.
IASummary generated by artificial intelligence from a story by France 24. It may contain errors: the original source prevails.




Comments
Be respectful. Comments reported by several people are hidden until a moderator reviews them.
You do not need an account to read, only to comment. Sign in with a code sent to your email or with your Google account. We only show the name you choose, never your email.