CERT-In PHP2Shell Alert: India, UK Warn of Critical PHP Flaws Threatening Websites Worldwide
CERT-In PHP2Shell Alert: India, UK Warn of Critical PHP Flaws Threatening Websites Worldwide
The CERT-In PHP2Shell alert has triggered an urgent cybersecurity warning for Indian website operators, as authorities in India and the United Kingdom call for immediate security updates following the discovery of two critical vulnerabilities in PHP, the programming language used by millions of websites worldwide.
India's Computer Emergency Response Team (CERT-In), under the Ministry of Electronics and Information Technology, issued vulnerability note CIVN-2026-0510 on October 21, identifying serious security weaknesses that could allow remote attackers to execute malicious code on affected servers.
The warning was reinforced by the United Kingdom's National Cyber Security Centre (NCSC), which issued its own advisory on the same day, urging organisations to identify vulnerable PHP installations, apply security patches and examine exposed systems for possible compromise.
The vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619, have been assigned critical severity ratings of 9.2 under the CVSS 4.0 scoring system.
The security threat is particularly significant because the flaws affect PHP itself rather than an individual website plugin, theme or content management system.
#CERTIn #PHP2Shell #PHPSecurity #CyberSecurity #WordPressSecurity #PHPVulnerabilities #WebsiteSecurity #CyberSecurityIndia #SecurityUpdates #RemoteCodeExecution #NCSC
