A day after vulnerabilities were discovered in the PHP programming language, prompting an urgent response from governments and cybersecurity agencies worldwide, the PHP team released fixes for two critical remote code execution (RCE) vulnerabilities. The team urged users to update their systems immediately.

On Wednesday, October 21, governments and cybersecurity agencies warned website operators about two critical security flaws in PHP, a programming language that powers a significant portion of the internet. The two vulnerabilities, tracked as CVE-2026-109618 and CVE-2026-109619, were identified on Tuesday, October 20, triggering a global cybersecurity response. Website operators, hosting providers, and government agencies scrambled to secure their systems. Some organisations reportedly took their websites offline while preparing to apply the fixes.

The vulnerabilities also prompted warnings from government cybersecurity agencies worldwide.…