U.S. Cybersecurity and Infrastructure Security Agency

“strongly urges organizations to immediately patch the recently disclosed critical vulnerabilities in PHP,”

U.S. Cybersecurity and Infrastructure Security Agency · said 2026-10-21 · reported 2026-10-21

CISA on Wednesday urged organizations to immediately patch the critical PHP vulnerabilities.

“has not observed exploitation of these vulnerabilities as of the time of publication, they pose a risk to organizations if left unpatched.”

U.S. Cybersecurity and Infrastructure Security Agency · said 2026-10-21 · reported 2026-10-21

CISA said it had not observed exploitation of the vulnerabilities as of publication but warned they pose a risk if left unpatched.