October 21, 2026
The National Cyber Security Centre (NCSJ) has issued an alert encouraging UK organisations to take immediate action to mitigate two critical security issues in PHP, the server-side scripting language that underpins a large share of the world's websites and content management systems, after the PHP project published fixes for vulnerabilities that could allow an unauthenticated attacker to execute commands on any web server running the software.