PHP Panic: Security incident

Two critical bugs in PHP, the language running most of the web, let strangers take over servers without a password. The patch is out, attacks started early, and governments pulled the plug.

Evidence boundary

Confidence describes the coverage of the available evidence. It is not a safety rating and does not guarantee that a protocol or asset is safe.

Sources

• https://decrypt.co/381519/php-panic-critical-bugs-70-percent-internet-risk-everyone-freaking-out

Record history

First seen: 2026-10-21T15:35:16.000Z. Last updated: 2026-10-21T18:14:14.212Z. Revision: 1.