Skip to content
ENTITY PROFILE / KNOWLEDGE GRAPH

PHP Foundation

RSS

PHP Foundation acknowledged a structural failure caused a delayed fix for a critical security flaw first identified in 2024. The foundation’s lack of a dedicated path to remote code execution and small core team stalled the response over months. Emergency patches for two related critical vulnerabilities were released, prompting government agencies and other organizations to temporarily take websites offline. Disruptions included the Netherlands’ digital identity service, Finland’s Valtori, France’s Interior Ministry, Germany’s ITZBund, Australia’s cyber.gov.au, Japan’s Prime Minister urging operators to patch, and Wikimedia’s Toolforge and Cloud VPS. The foundation is working to resolve the issue and prevent similar delays.| PHP Foundation issued a patch for PHP OpenAI worked with PHP Foundation on patches Eric Wallace cooperated with PHP Foundation Wiz Research discovered the first PHP vulnerability using Wiz Atlas PHP Foundation maintains PHP: Hypertext Preprocessor PHP Foundation warned about php2shell PHP Foundation identified signs of CVE-2026-109618 PHP Foundation scheduled a release for PHP vulnerabilities PHP Foundation scheduled its release at 14:00 UTC on 2026-10-21· Entity summary generated by Graphiti

RELATIONS
9Relations
CURRENT
9Current
EVENTS
4Events
REPORTS
6Source reports
KNOWLEDGE ATLAS0 entities · 0 relations
No public neighbors yet
Explore all published links of a node; previously discovered relations remain visible.

Relation timeline

BY VALID-FROM DATE
  1. PHP FoundationMAINTAINSPHP

    PHP Foundation maintains PHP: Hypertext Preprocessor

    Current1 sourcePHP
  2. TechRadarCOOPERATED WITHPHP Foundation

    Eric Wallace cooperated with PHP Foundation

    Current1 sourceTechRadar
  3. PHP FoundationISSUED PATCH FORPHP

    PHP Foundation issued a patch for PHP

    Current1 sourcePHP
  4. OpenAIWORKED WITHPHP Foundation

    OpenAI worked with PHP Foundation on patches

    Current1 sourceOpenAI
  5. PHP FoundationSCHEDULED RELEASE FORPHP

    PHP Foundation scheduled a release for PHP vulnerabilities

    Current1 sourcePHP
  6. PHP FoundationSCHEDULED RELEASE ATPHP

    PHP Foundation scheduled its release at 14:00 UTC on 2026-10-21

    Current1 sourcePHP
  7. PHP FoundationIDENTIFIED SIGN OFCVE-2026-109618

    PHP Foundation identified signs of CVE-2026-109618

    Current1 sourceCVE-2026-109618
  8. Wiz ResearchDISCOVERED VULNERABILITY USINGPHP Foundation

    Wiz Research discovered the first PHP vulnerability using Wiz Atlas

    Current1 sourceWiz Research
  9. PHP FoundationWARNED ABOUTPHP2Shell

    PHP Foundation warned about php2shell

    Current1 sourcePHP2Shell

Relations are facts Graphiti extracted from reports, not verbatim quotes. An end date means later reporting showed the relation no longer holds.

Events 4

Source reports 6