Sri Lanka CERT warns of critical security vulnerabilities in systems developed using PHP

Sri Lanka, Oct. 23 -- Sri Lanka CERT requests public and private sector organisations, as well as website developers, to pay attention to security vulnerabilities identified in relation to the PHP software commonly used for developing websites and web applications.

Due to the security vulnerabilities referenced by the identification codes CVE-2026-109618 and CVE-2026-109619, there is a severe risk of unauthorised system access, data theft, and disruption of functionality.Study Security

Sri Lanka CERT urges relevant parties to promptly take the following measures to minimise the risk by identifying all systems and web applications using PHP and verify their running versions and immediately updating systems and web applications in accordanc...