Critical security issue affecting PHP
The NCSC is encouraging UK organisations to prepare for immediate updating of systems using PHP.
The NCSC is encouraging UK organisations to prepare for immediate updating of systems using PHP.
Where immediate remediation is not feasible, organisations should consider taking the system offline until it can be fully mitigated.
The release is scheduled for Wednesday, 21 October 2026 at 15:00 BST, but may occur earlier.
On 20 October 2026, the PHP Foundation announced an upcoming security release addressing two critical vulnerabilities in PHP.
How organisations can address the growing trend in which multiple vulnerabilities within a single product are exploited over a short period.
Microsoft Windows Netlogon vulnerability is being actively exploited and organisations should install necessary updates as soon as is practicable.
PHP (PHP Hypertext Preprocessor) is a widely used server-side scripting language designed for web development.
It runs on a web server to generate dynamic page content, interact with databases, and handle backend application logic before delivering the final HTML output to a user's browser.
MobileIron remote code execution vulnerability is a target for APT nation state groups and cyber criminals to compromise the networks of UK organisations.
What happened
The NCSC is encouraging UK organisations to prepare for immediate updating of systems using PHP.
Where immediate remediation is not feasible, organisations should consider taking the system offline until it can be fully mitigated.
The release is scheduled for Wednesday, 21 October 2026 at 15:00 BST, but may occur earlier.
What changed
On 20 October 2026, the PHP Foundation announced an upcoming security release addressing two critical vulnerabilities in PHP.
How organisations can address the growing trend in which multiple vulnerabilities within a single product are exploited over a short period.
Microsoft Windows Netlogon vulnerability is being actively exploited and organisations should install necessary updates as soon as is practicable.
Who is affected
PHP (PHP Hypertext Preprocessor) is a widely used server-side scripting language designed for web development.
It runs on a web server to generate dynamic page content, interact with databases, and handle backend application logic before delivering the final HTML output to a user's browser.
Technical details
MobileIron remote code execution vulnerability is a target for APT nation state groups and cyber criminals to compromise the networks of UK organisations.
Attribution
NCSC-UK: The NCSC is encouraging UK organisations to prepare for immediate updating of systems using PHP.
What to watch next
Watch for additional victim details, indicators of compromise and follow-on exploitation reports.
Watch for revised vendor guidance, fixed versions and mitigation updates.