Japan suspends websites due to critical PHP vulnerabilities; NSA and FBI urge urgent updates
After two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) were discovered, allowing unauthenticated remote code execution, Japanese agencies and companies suspended a number of services. PHP developers released patched versions, and the NSA and FBI urged organizations to update systems urgently. According to OpenAI, its models helped find the vulnerabilities; PHP, it says, powers roughly 70% of websites.
Sevara Azamova















