PHP Foundation

PHP Foundation acknowledged a structural failure caused a delayed fix for a critical security flaw first identified in 2024. The foundation’s lack of a dedicated path to remote code execution and small core team stalled the response over months. Emergency patches for two related critical vulnerabilities were released, prompting government agencies and other organizations to temporarily take websites offline. Disruptions included the Netherlands’ digital identity service, Finland’s Valtori, France’s Interior Ministry, Germany’s ITZBund, Australia’s cyber.gov.au, Japan’s Prime Minister urging operators to patch, and Wikimedia’s Toolforge and Cloud VPS. The foundation is working to resolve the issue and prevent similar delays.| PHP Foundation issued a patch for PHP OpenAI worked with PHP Foundation on patches Eric Wallace cooperated with PHP Foundation Wiz Research discovered the first PHP vulnerability using Wiz Atlas PHP Foundation maintains PHP: Hypertext Preprocessor PHP Foundation warned about php2shell PHP Foundation identified signs of CVE-2026-109618 PHP Foundation scheduled a release for PHP vulnerabilities PHP Foundation scheduled its release at 14:00 UTC on 2026-10-21· Graphiti 生成的实体摘要