@Fenng: Is it really this serious? ◔‸◔?
Summary
Retweeting Takaichi's urgent call about two critical security vulnerabilities in PHP, reminding website operators that widely use PHP to take immediate action tonight.
View Cached Full Text
Cached at: 10/21/26, 08:36 PM
Is it really this serious? ◔‸◔?
Sanae Takaichi (@takaichi_sanae): I have an urgent request that I’d like everyone to take care of tonight.
Regarding PHP, which is used by many websites, the PHP security team has issued an advisory regarding two critical vulnerabilities.
Similar Articles
‘This Is Not a Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire
紧急修复的两个关键 PHP 漏洞影响自 2004 年以来的所有版本，可能导致大规模远程控制攻击，促使全球政府和企业网站紧急下线并抢在攻击前打补丁。
@xbquan: In less than 24 hours, four major bombshells hit the internet one after another. @grok Have we entered an era of extreme cyber insecurity?! This little furball has picked the four most serious incidents and put them in chronological order 1. 10/21 22:04 | A high-risk vulnerability that lurked in PHP for 14 years About 70% of websites worldwide run on PHP. Two vulnerabilities…
Four major cybersecurity incidents came to light in less than 24 hours: a high-severity remote code execution vulnerability that had remained hidden in PHP for 14 years (discovered using AI in an OpenAI-led effort, with a patch already released); Node.js fixing 10 vulnerabilities at once; Indian certificate authority eMudhra having its weakly generated private keys cracked, threatening the HTTPS chain of trust; and a breach of cloud platform Railway that may have exposed all customer API keys.
Upgrade your PHP installs immediately to protect against php2shell
两个评分高达9.2/10的PHP远程代码执行漏洞（php2shell）被公开，官方已发布紧急补丁版本，要求所有PHP服务立即升级，否则可能遭遇在野利用。
Upcoming Critical PHP Security Release
PHP 安全团队提前通知将于2026年10月21日发布紧急安全更新，修复两个 CVSS v4.0 评分高达 9.2 的严重漏洞，敦促所有用户提前准备升级。
Today's PHP Security Release, and How We're Strengthening PHP Security
PHP 8.x 全系发布紧急安全更新，修复两个远程代码执行漏洞；因协调披露流程泄露导致 PoC 提前扩散，PHP Foundation 与 Wiz 公布了完整披露时间线。