Advisory on PHP Vulnerability

RAC/CARICERT draws attention to two critical security vulnerabilities affecting PHP that may enable unauthenticated remote code execution (RCE) under certain conditions.

Successful exploitation could allow unauthorized parties to execute malicious code on affected systems, potentially compromising the confidentiality, integrity, and availability of information and digital services.

RAC/CARICERT strongly advises organizations operating PHP-based websites and applications to assess their exposure without delay and implement recommended mitigation measures.

For more information on vulnerabilities, systems at risk and mitigation measures consult the Advisory on PHP vulnerability.

(Source: RAC | Caricert. Publication period RAC: 2026)