🚧

Our website is currently unavailable due to a critical security vulnerability.

PHP (Hypertext Preprocessor) is a widely used, server-side scripting language for web development. A critical security vulnerability is currently threatening millions of websites, as it could allow attackers to remotely execute malicious code (Remote Code Execution, RCE) without authentication. On Wednesday afternoon (October 21, 2026), the developers of the PHP project released updated versions of the web scripting language that patch these security vulnerabilities.

For more information:
heise php2shell (EN)
CERT-EU Security Advisory 2026-018
CVE-2026-109618 (CVSS 9.2, critical)
CVE-2026-109619 (CVSS 9.2, critical)