Two critical bugs in the PHP web programming language, used by the majority of the internet, threatened to upend the internet — and it's unlikely to be the last major software scare.
PHP-ocalypse: How two critical web bugs almost broke the internet
TE TechCrunch 
Key takeaways
Two critical PHP vulnerabilities nearly compromised the internet, prompting urgent patches and system shutdowns to prevent attacks.
- PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 allowed unauthorized system access.
- Patches were released, but many systems remain unpatched and vulnerable.
- Governments and companies took action to mitigate risks from potential attacks.
Summarised automatically by AI from the original article by TechCrunch. AI can make mistakes, so check the original for details.
Read the full story on TechCrunch You've read the opening, about 32 of 1,905 words. The full piece is published by TechCrunch.
Continue reading ↗ Story details
- Published
- By
- Zack Whittaker
- Section
- Security
- Length
- 1,905 words · about 8 min read
- Format
- Article
- Original
- techcrunch.com ↗
Topics
Related reporting
5 stories on this topic from 3 sources, oldest first.
- Hacker News Upcoming Critical PHP Security Release
- Free Malaysia Today Cyber agency warns websites may go dark as PHP prepares critical fix
- Hacker News PHP2Shell: AI uncovers critical RCE in PHP
- Hacker News Potential third critical PHP CVE
- TechCrunch PHP-ocalypse: How two critical web bugs almost broke the internet (this story)
