Skip to main content
PHP vulnerabilities: what can you do?

Report

PHP vulnerabilities: what can you do?

Publication date: October 23, 2026

Read report

Two critical vulnerabilities have been discovered in PHP, a widely used programming language for websites and web applications. Exploitation of these vulnerabilities could allow attackers to take over systems remotely. As a precaution, the NCSC-NL had temporarily taken its website offline. Several other organizations, including government agencies, had also proactively disabled their websites. Security updates (patches) are now available to resolve the vulnerabilities.

Photocredits: Istock/Funtap