Critical PHP Vulnerability Affecting Website Security
A vulnerability in a number of websites has been found and is being used by malicious threat actors to compromise websites.
Note: TIC does not setup nor maintain websites, so you will need to talk to your web developer or web host to find out if your website is impacted.
Please see below link with details and instructions for your web developers:
Critical Vulnerabilities in PHP Require Immediate Patching | CISA What can my organization do?
The Cybersecurity & Infrastructure Security Agency (CSIA) recommends following vendor best practice advice in the mitigation of vulnerabilities. CISA highly encourages organizations to follow these priority actions:
Identify systems running PHP across your infrastructure, prioritizing internet-facing systems. As all versions may be affected, do not limit discovery to outdated PHP versions; identify PHP installations generally and assess their exposure to CVE-2026-109618 and CVE-2026-109619.
Continuously monitor for security updates from third-party software vendors, including for appliances and services that may bundle PHP as a component. Apply relevant updates as they become available.
Update to the latest version of PHP and continue to monitor for future updates
Apply the additional hardening steps provided by the PHP Team.
If you are unable to update to a version with the security update applied, the PHP Team have provided temporary mitigations.
If you are unable to update, or disable, the system immediately then you should assess the system for any evidence of compromise prior to your upgrade or mitigation and look for backdoors installed by an attacker.
If you are not confident in your ability to do this yourselves then you can get assistance from an NCSC-assured Cyber Incident Response provider.
Continuously monitor for security updates from third-party software vendors, including for appliances and services that may bundle PHP. NCSC-NL have published an inventory list of software products with a PHP dependency potentially affected by the vulnerabilities.
If you are a current TIC Client: You can reach out to us if you have any questions regarding this. Please reach out via email or by phoning the support line. Email the Help Desk at support@ticbiz.com or call 617-884-1086, and a technician will be happy to assist.
Not a client and want to learn more about how TIC can help keep your company informed on security updates and breaches? Contact us by clicking here.
Comments