Critical PHP vulnerability forces shutdown of institutional and corporate portals
Two critical flaws in PHP, the language behind roughly 70% of the world's websites, have triggered an international technical response. The flaws, in the interpreter's memory management, could allow remote code execution without authentication. They were found by researchers at Calif and Wiz using AI tools. INCIBE set the risk at 9.2 out of 10 and joined alerts from US, European and Asian agencies. The PHP Foundation has already released patches.
In 35 seconds
- Two PHP vulnerabilities could let an attacker run code on a server without authenticating.
- INCIBE rated the risk 9.2 out of 10 and urged updating or isolating exposed platforms.
- Researchers at Calif and Wiz identified them using AI tools; they had gone unnoticed for years.
Read the full story at La Voz de Galicia
IASummary generated by artificial intelligence from a story by La Voz de Galicia. It may contain errors: the original source prevails.
Comments
Be respectful. Comments reported by several people are hidden until a moderator reviews them.
You do not need an account to read, only to comment. Sign in with a code sent to your email or with your Google account. We only show the name you choose, never your email.