🚧

Due to critical security vulnerabilities, our website is currently unavailable.

PHP (Hypertext Preprocessor) is a widely used, server-side scripting language for web development. Currently, two critical security vulnerabilities are threatening millions of websites, as they could allow attackers to remotely execute malicious code (Remote Code Execution, RCE) without authentication. The developers of the PHP project announced on Wednesday afternoon (October 21, 2026) released updated versions of the web scripting language, in which the security vulnerabilities have been patched.

For more information:
heise php2shell (EN)
CERT-EU Security Advisory 2026-018
CVE-2026-109618 (CVSS 9.2, critical)
CVE-2026-109619 (CVSS 9.2, critical)