This article was collected and archived by Digital Sovereignty Watch from an institutional or public source relevant to digital sovereignty, technology policy, cybersecurity, cloud services, artificial intelligence or European regulation.
Cybersecurity
[lat]CIRT[/lat] of the State Administration Calls for Urgent PHP Updates to Protect Websites and Digital Services
The Ministry of Public Administration – Directorate for Information Security, the State Administration’s CIRT, calls on institutions, businesses, hosting service providers, and website administrators to immediately check the PHP versions they use and apply available security updates. Two critical security vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619, have been discovered in PHP, the technology underpinning a large number of websites and digital services. The specified version or a newer version containing the relevant fixes should be installed, or the security update provided by the operating system vendor or hosting platform should be applied. In October, an additional warning was also issued for CVE-2026-115560, which occurs with a specific combination of configuration and application code. Until an appropriate fix is released, temporarily setting session.upload_progress.enabled=0 is recommended, followed by restarting all PHP worker processes. https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security/?utm_source=chatgpt.com