EU agency warns websites may need to be taken offline as PHP prepares patches for vulnerabilities

Developers of the PHP programming language have announced upcoming patches for two critical vulnerabilities, prompting warnings from cybersecurity agencies. The flaws, which have been assigned a severity rating of 9.2 on the CVSS v4.0 scale, pose a significant risk of cyberattacks to websites utilizing the language. Users are being urged to apply the security updates as soon as they become available to mitigate potential exposure.

In response to the announcement, the European Union’s cybersecurity agency has advised that some websites may need to be taken offline to facilitate the necessary patching process. The situation highlights the urgency of the security fix, with developers and agencies coordinating to ensure that organizations can protect their digital infrastructure from exploitation.