Skip to content
EVENT / TOPICHistorical

Global Websites Hit by Critical PHP Vulnerability

1 reports1 sources10/22/2026 updated

Current overview (not historical)

AI overview

A newly disclosed critical PHP flaw has forced organizations worldwide to urgently patch their systems to prevent remote code execution. Following the disclosure, the UK government shut down 32 services due to security concerns. Security firm Wiz highlighted that PHP powers roughly 70% of all websites, and attackers have been exploiting the vulnerability within hours instead of weeks. Major cloud and CDN providers, including Orange and Cloudflare, reported a surge in exploitation attempts during the short window of exposure. The rapid response by governments and service providers underscores the widespread impact of the flaw and the heightened risk of widespread code execution attacks.

Written with AI from the reporting · updated 10/22/2026

Latest developmentOct 23, 01:12
Global organizations scramble to update systems after critical security flaws found in PHP
Explore the timeline, relations and evidence
Expand the detailed fact route and sources

Story route

A station-by-station route from the first public evidence onward; every station carries its own evidence and uncertainty.

  1. 1Unclassified fact stationOct 22, 00:00recorded Oct 23, 01:26single sourcerevised

    PHP 关键漏洞导致全球网站下线

    Read original source ↗ BBC WorldReplay this moment in the explorer
    Evidence & revisions · 1 source records
    Subject：
    PHP 编程语言
    Action：
    关键漏洞被发现并公开
    Object：
    web 服务器和网站
    Occurred (fact side)：
    Oct 22, 00:00
    BBC World ↗Report pageRevision 2 · currently revised
    Published (valid side)：
    Oct 23, 01:12
    First seen (known side)：
    Oct 23, 01:26
    Fact stationSingle source · one-sided claimRevised

    Copy may have been revised later; time replay is bounded. Layer labels group reading only, not causation between layers.

Uncertainty marks flag where to check the sources; they are not proven causation.

Report timeline

Explore every side through dated source reports.

Oct 23
  1. BBC WorldRelated fact: single sourceSource report revised
    Global organizations scramble to update systems after critical security flaws found in PHP

    Report first recorded Oct 23, 01:26

    Organizations worldwide are updating systems following the discovery of critical vulnerabilities in PHP, a widely-used web development language. The UK government took precautionary measures, taking 32 services offline and four partially unavailable, though no successful attacks have been reported so far. Experts say the full impact may take months to become apparent.

    Read original source ↗

Event discussion

Reader opinions are hosted on GitHub Discussions; posting requires a GitHub account. Comments are not verified facts.

Open GitHub Discussions