← Back

Wire · regulatory

PHP vulnerability exposes 85 government websites to cyber attacks

Published

25 October 2026

Topic

regulatory

◆ Sectors

Government & Space

◆ Geography

Sri Lanka

◆ Source

Read at sundaytimes.lk →

◆ Verified

Fusion42 · 25 October 2026 · Fusion42 review

Over 85 Sri Lankan government websites were exposed to critical PHP2Shell vulnerabilities allowing attackers full server control; 40% of affected systems have been patched by government technology authorities, with ongoing coordination required to secure all sites.

This Wire brief sits within Fusion42's coverage of Government & Space, and 36 sources have reported it between 21 Oct 2026 and 26 Oct 2026.

◆ ◆ The Wire takeaway

You face immediate risk if your digital platform runs outdated PHP code like many Sri Lankan government sites. Prioritise quick patching or taking affected systems offline to avoid breaches that could expose sensitive data or critical services.

◆ Coverage

36 sources · first reported 21 Oct 2026 · latest 26 Oct 2026

◆ Related on Wire

◆ Topics

Government & Spacephp-vulnerabilitygovernment-securitycyber-attackspatchingdigital-infrastructure