1. United States: The FBI warned that the vulnerability could lead to the intrusion of confidential data or networks. The NSA urged all organizations within the United States to take immediate action. 2. Canada: The Canadian Cyber Security Centre is

2026-10-22

1. United States: The FBI warned that the vulnerability could lead to the intrusion of confidential data or networks. The NSA urged all organizations within the United States to take immediate action. 2. Canada: The Canadian Cyber Security Centre issued a security advisory urging users and system administrators to immediately update affected PHP versions and to focus on checking servers and applications exposed to the internet. 3. European Union: The European Commission's cybersecurity department urged relevant organizations to immediately patch the vulnerability and warned that if it cannot be patched, disconnecting the relevant systems from the internet should be considered. 4. United Kingdom: The UK's National Cyber Security Centre urged relevant agencies to immediately investigate PHP systems and, if they cannot be patched or temporary mitigation measures taken in time, to consider temporarily shutting down the systems. 5. Germany: The German Federal Information Technology Services provider ITZBund has preemptively shut down several websites. The German Federal Ministry for Digital Affairs stated that no related security incidents had been detected at the time. 6. France, Belgium, the Netherlands, Finland, and the Czech Republic: Some government, school, or hospital websites in these countries have taken preventative measures such as being taken offline. 7. Japan: Japanese Prime Minister Sanae Takaichi urged website operators to prepare and immediately install security patches, stating that temporarily shutting down websites could reduce risk if updates could not be installed quickly. 8. South Korea: The South Korean government stated it is "highly concerned" about the issue and is developing countermeasures. South Korean IT companies and the cybersecurity industry are taking urgent action. 9. Singapore: The Cyber Security Agency of Singapore urged relevant agencies to immediately install security updates, prioritizing checks on systems open to the internet and investigating systems that indirectly use PHP through third-party applications or components. 10. Hong Kong SAR: The Hong Kong Special Administrative Region Government's Computer Incident Response Center issued a high-level security alert, urging system administrators to inventory PHP frameworks and applications and update them as soon as patches are released. 11. Taiwan: Taiwan's Cyber Security Agency has notified agencies, schools, and businesses to complete PHP version checks and security updates as soon as possible, reminding them to check for abnormal access records after updating. 12. Australia: Australia's cybersecurity agency classified the vulnerability as severe and urged organizations using PHP to take protective measures as soon as possible. The Australian cybersecurity agency's own website was affected.