Websites across world hit by millions of attempts to exploit PHP code flaw

Websites across world hit by millions of attempts to exploit PHP code flaw — Live Feedhttps://www.live-feeds.com/feed/websites-across-world-hit-by-millions-of-attempts-to-exploit-php-code-flawContinuously updated, source-cited coverage. Millions of Exploit Attempts Hit Global Websites Following PHP Flawhttps://www.live-feeds.com/feed/websites-across-world-hit-by-millions-of-attempts-to-exploit-php-code-flawhttps://www.live-feeds.com/feed/websites-across-world-hit-by-millions-of-attempts-to-exploit-php-code-flaw#u154691Sun, 25 Oct 2026 17:05:53 +0000Websites around the globe are facing millions of attempts to exploit newly disclosed vulnerabilities in PHP, the web programming language that underpins 70% of the internet. Threat actors are targeting critical remote code execution flaws, tracked as CVE-2026-109618 and CVE-2026-109619 with CVSS scores of 9.2, through specially crafted HTTP requests. In response to the threat, governments and corporate operators are taking websites offline to apply security patches. In the United Kingdom, 32 government services have been made unavailable while security work takes place, though Downing Street n