跳到正文
ENTITY PROFILE / 实体档案

PHP

RSS

PHP released security fixes Oct 21, 2026 for CVE‑2026‑109618 and 109619 (PHP2Shell). Patches incorporated in PHP 8.5.12, 8.4.27, 8.3.36, 8.2.35. The flaws allowed unauthenticated remote code execution via unsafe out‑of‑memory cleanup and stale internal state reuse; Apache’s mod_php is the highest‑risk platform. Cloudflare logged widespread exploitation attempts; no confirmed successful breaches were reported by BSI or Japan’s government. PHP 8.1 and earlier no longer receive official releases, leaving older servers at risk unless upgraded. PHP Foundation coordinated the patch with Cloudflare, CISA, and the White House. PHP PATCHED CVE-2026-109618 PHP PATCHED CVE-2026-109619 mod_php RISKED_BY PHP GoDaddy WARNED PHP PHP is used by Magento European Union Computer Emergency Response Team warned about PHP vulnerabilities Huntress noted that fixes may only be for supported PHP 8 versions GoDaddy warned about the PHP vulnerabilities Wordfence noted that every WordPress site sits on a PHP server WordPress automatic updates do not fix the PHP vulnerabilities PHP Foundation scheduled a release for PHP vulnerabilities PHP Foundation scheduled its release at 14:00 UTC on 2026-10-21 ProgramBench includes tasks for building a PHP interpreter. Tomer Schwartz COLLABORATED_WITH PHP· Graphiti 生成的实体摘要

RELATIONS
73关系
CURRENT
72当前有效
EVENTS
10相关事件
REPORTS
19来源报道
KNOWLEDGE ATLAS0 个实体 · 0 条关系
暂无可公开的邻近关系
按需展开实体的全部已公开关系，保留探索过的节点与连线。

关系变化

按生效时间
  1. Tomer SchwartzCOLLABORATED WITHPHP

    Tomer Schwartz COLLABORATED_WITH PHP

    当前有效1 条来源Tomer Schwartz
  2. ProgramBenchINCLUDES TASK FORPHP

    ProgramBench includes tasks for building a PHP interpreter.

    当前有效1 条来源ProgramBench
  3. PHPHAS VULNERABILITYPHP2Shell

    PHP has the vulnerability 'php2shell'

    当前有效1 条来源PHP2Shell
  4. PHP FoundationMAINTAINSPHP

    PHP Foundation maintains PHP: Hypertext Preprocessor

    当前有效1 条来源PHP Foundation
  5. WizESTIMATED USAGE OFPHP

    Wiz estimated that PHP powers about 70 percent of all websites in the world

    当前有效1 条来源Wiz
  6. OpenAIWORKED WITHPHP

    OpenAI worked with PHP to verify vulnerabilities and develop patches

    当前有效1 条来源OpenAI
  7. 4ChanTEMPORARILY SHUT DOWN DUE TOPHP

    4Chan was temporarily shut down after the vulnerabilities were disclosed

    当前有效1 条来源4Chan
  8. PHPPOWERSDrupal

    PHP powers Drupal

    当前有效1 条来源Drupal
  9. PHPPOWERSWordPress

    PHP powers WordPress

    当前有效2 条来源WordPress
  10. PHPPOWERSDeviantArt

    PHP powers DeviantArt

    当前有效1 条来源DeviantArt
  11. The Internet ArchiveEXPERIENCED OFFLINE DUE TOPHP

    The Internet Archive was briefly forced offline because of PHP

    当前有效1 条来源The Internet Archive
  12. DeviantArtTEMPORARILY SHUT DOWN DUE TOPHP

    DeviantArt was temporarily shut down after the vulnerabilities were disclosed

    当前有效1 条来源DeviantArt
  13. PHPPOWERS4Chan

    PHP powers 4Chan

    当前有效1 条来源4Chan
  14. WizDESCRIBED VULNERABILITY OFPHP

    Wiz has called the PHP vulnerabilities among the most severe discovered

    当前有效1 条来源Wiz
  15. GPT-5.6 SolIDENTIFIEDPHP

    GPT‑5.6 Sol was used to identify a critical PHP flaw

    当前有效1 条来源GPT-5.6 Sol
  16. PHPPOWEREDWikipedia

    PHP platform powers Wikipedia

    当前有效2 条来源Wikipedia
  17. PHP2ShellAFFECTSPHP

    PHP2Shell vulnerability affects PHP core

    当前有效1 条来源PHP2Shell
  18. UK National Cyber Security CentreURGEDPHP

    UK National Cyber Security Centre urged users of PHP to apply the fixes

    当前有效1 条来源UK National Cyber Security Centre
  19. AustraliaURGEDPHP

    Australia urged users of PHP to apply the fixes

    当前有效1 条来源Australia
  20. European UnionURGEDPHP

    European Union urged users of PHP to apply the fixes

    当前有效1 条来源European Union
  21. WizIDENTIFIED VULNERABILITY INPHP

    Wiz identified critical security vulnerabilities in PHP

    当前有效1 条来源Wiz
  22. WikipediaBUILDS ONPHP

    Wikipedia’s website is built on the PHP programming language

    当前有效2 条来源Wikipedia
  23. WikipediaUSESPHP

    Wikimedia uses the PHP programming language for its services

    当前有效1 条来源Wikipedia
  24. WordPressBUILDS ONPHP

    WordPress is built on the PHP programming language

    当前有效3 条来源WordPress
  25. BBCHAD PAGES OFFLINE DUE TOPHP

    BBC had pages offline due to PHP programming language

    当前有效1 条来源BBC
  26. MySQLDISCOVERED VULNERABILITIES INPHP

    Wiz (cyber‑security firm) discovered vulnerabilities in PHP programming language

    当前有效1 条来源MySQL
  27. Semantic Modeling LanguageURGEDPHP

    UK National Cyber Security Centre urged on PHP programming language

    当前有效1 条来源Semantic Modeling Language
  28. The TraitorsAFFECTED DUE TOPHP

    The Traitors was affected due to PHP programming language

    当前有效1 条来源The Traitors
  29. Doctor WhoAFFECTED DUE TOPHP

    Doctor Who was affected due to PHP programming language

    当前有效1 条来源Doctor Who
  30. PhilippinesISSUED ADVICE ONPHP

    United States National Security Agency issued advice on PHP programming language

    当前有效1 条来源Philippines
  31. BNB FoundationADDRESSING VULNERABILITIES INPHP

    Wikimedia Foundation addressed vulnerabilities in PHP programming language

    当前有效1 条来源BNB Foundation
  32. COBOLCLAIMEDPHP

    Huntress (cyber‑security company) claimed PHP programming language is everywhere

    当前有效1 条来源COBOL
  33. press592.phpDISCOVERED VULNERABILITIES INPHP

    Calif (cyber‑security firm) discovered vulnerabilities in PHP programming language

    当前有效1 条来源press592.php
  34. GitHubPROVIDES TOOL FORPHP

    GitHub provides a tool to check PHP for the discovered vulnerability.

    当前有效1 条来源GitHub
  35. PHPCOORDINATED WITHCloudflare

    Cloudflare coordinated the fix with PHP developers.

    当前有效1 条来源Cloudflare
  36. WizFOUND VULNERABLE INPHP

    Wiz found the same PHP vulnerability.

    当前有效1 条来源Wiz
  37. GPT-5.6 SolDISCOVERED VULNERABILITY INPHP

    GPT-5.6 Sol discovered a critical PHP vulnerability affecting millions of websites.

    当前有效1 条来源GPT-5.6 Sol
  38. PHPCOORDINATED WITHWhite House

    The White House coordinated the fix with PHP developers.

    当前有效1 条来源White House
  39. PHPCOORDINATED WITHGoogle’s 100 ZEROS initiative

    CISA coordinated the fix with PHP developers.

    当前有效1 条来源Google’s 100 ZEROS initiative
  40. PHPCOORDINATED WITHWiz

    PHP developers and Wiz coordinated the fix.

    当前有效1 条来源Wiz

关系是 Graphiti 从报道中提取的事实陈述，不是原文引述；失效时间表示后来的报道显示这条关系已不成立。

相关事件 10

来源报道 19