Critical PHP flaws put millions of websites at risk as exploit attempts emerge

Two critical PHP vulnerabilities allowing remote command execution affect over 22 million exposed instances, with active attacks reported. Immediate patching and isolation of unfixable systems are urged to prevent control takeover of enterprise web servers.

This Wire brief sits within Fusion42's coverage of Cybersecurity and Enterprise Software, and 24 sources have reported it between 21 Oct 2026 and 23 Oct 2026.