Two critical PHP vulnerabilities, present on 75% of websites, force thousands of pages to shut down
The PHP Foundation released patches for two "critical" vulnerabilities in PHP, the language used by roughly 75% of the world's web pages, with a severity score of 9.2 out of 10. The flaws allow malicious code to be executed on servers. The foundation urged administrators to update "right now" to versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35. Thousands of sites, including government, hospital and university pages, have shut down until the update is applied, and Cloudflare reported early attacks.
In 45 seconds
- The PHP Foundation rated the two vulnerabilities as critical, with a severity of 9.2 out of 10, and urged immediate updates to versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35.
- The flaws allow an attacker to execute code on servers, opening the door to data theft and malware.
- Websites of companies, governments, hospitals and universities have shut down until patches are installed; in Germany some providers cut access to their entire network.
Read the full story at El Español
IASummary generated by artificial intelligence from a story by El Español. It may contain errors: the original source prevails.
Comments
Be respectful. Comments reported by several people are hidden until a moderator reviews them.
You do not need an account to read, only to comment. Sign in with a code sent to your email or with your Google account. We only show the name you choose, never your email.