Nepali Awaz
Published: · 169 views
Kathmandu. With two serious security vulnerabilities found in the 'open-source' programming language 'PHP', used to operate millions of websites worldwide, government and private websites across the world are at high risk.
Developers released a 'patch' (update) on Wednesday afternoon to fix the security vulnerabilities and urged all users to update their systems immediately.
It has been warned that by exploiting these vulnerabilities, named 'CVE-2026-109618' and 'CVE-2026-109619', hackers can take control of servers remotely without needing a password, access government and confidential databases, and deface websites. The PHP Foundation has instructed its users to apply this update immediately.
These vulnerabilities were discovered in August by security companies 'Calif' and 'Wiz' using AI tools. Cloudflare Chief Technology Officer (CTO) Dan Knecht said that hackers have already started exploiting it and launching attacks after information about it was leaked on Tuesday, a day earlier than the scheduled date.
Due to the increased risk, Australia, Japan, and European countries have temporarily shut down (offline) government websites as a precaution to prevent potential attacks. Paris Police in France, German government IT services, the Belgian Ministry of Foreign Affairs, and the operator of Wikipedia, 'Wikimedia Foundation', have also temporarily shut down some of their systems.
The US National Security Agency (NSA) has recommended keeping systems offline until the issue is resolved if immediate system updates are not possible, while the White House has ordered its agencies to assess the impact.
Comments (0)
Log in to leave a comment.
