Srilanka, Nov. 2 -- A global security alert involving two critical vulnerabilities in the widely used PHP programming language has prompted urgent action in Sri Lanka, with government institutions instructed to check their websites and applications for possible exposure.
The concern is particularly significant for Sri Lanka, where more than 70% of state institution websites and web applications reportedly use PHP. The Ministry of Digital Economy has issued a circular directing public institutions to identify affected systems and take corrective measures to prevent possible cyberattacks.
The vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619, could allow attackers to remotely execute malicious code on affected servers witho...