The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has not yet observed any exploitation of the PHP vulnerabilities, but these vulnerabilities pose a security risk to relevant organizations if they are not patched in a timely manner.

2026-10-21

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has not yet observed any exploitation of the PHP vulnerabilities, but these vulnerabilities pose a security risk to relevant organizations if they are not patched in a timely manner.