Two critical vulnerabilities have been identified in PHP, a widely used programming language that powers websites and web applications. These vulnerabilities (CVE-2026-109618 and CVE-2026-109619) could allow malicious cyber actors to remotely execute code in PHP core, potentially compromising sensitive data and networks.
The FBI urges organizations to take the following steps now:
➡️ If an immediate update is not feasible it is recommended that organizations take the system offline until it can be fully mitigated.
➡️ Immediately update affected PHP installations following the guidance on https://t.co/rDrPSxB3zX. Inventory where PHP runs in your environment, prioritizing internet-facing systems and vendor products that bundle PHP.
➡️ Monitor web servers for suspicious activity, including PHP processes unexpectedly launching command shells or downloading files. Ensure appropriate process-monitoring capabilities are in place to help identify potential exploitation.
➡️ If you find signs of compromise, isolate affected systems, preserve your web server and PHP logs, and report it to your local FBI field office or https://t.co/iqgVZIbCru. Those reports help us identify the actors involved and warn other organizations before they become victims.
For the latest information, follow PHP’s announcement on https://t.co/rDrPSxB3zX, CERT-EU Security Advisory 2026-018, and CISA’s Known Exploited Vulnerabilities catalog.
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
Real sustainability. Real data.
In 2025, Eureka partnered with @Evertreen to deliver measurable impact:
🌳 660+ trees planted
🌍 566.2 tons CO₂ offset
🤝 83+ local work hours
📍 Montana & Madagascar
🎥 See Madagascar planting in action ⬇️
https://t.co/5eiJNKNb8j
Roger Ford, President of @EnergyEureka provides an overview of U.S. and global energy policies under the second Trump administration and outlines the potential opportunities and risks facing the energy sector in the near future.
Apple: https://t.co/AePqveHzuz
Spotify: https://t.co/2t6wx0MCih
🚨 Okay this is a National Emergency
Muslims surround Americans in Dearborn Michigan viciously chanting “Allahu Akbar!!”
“Allahu Akbar! Allahu Akbar! Allahu Akbar!”
We need to start deportations and take our country back. Enough is enough