🚨PHP2Shell Flaws Take Down UK Government Services
UK Government Services Offline Due to PHP2Shell
TL;DR
PHP2Shell vulnerabilities caused disruptions to UK government services, including the OBR, DVLA, and police services. The NCSC issued 50,000 warnings to businesses and organizations.
PHP2Shell vulnerabilities, CVE-2026-109618 and CVE-2026-109619, caused disruptions to 32 UK government services and partially affected four more. The OBR, DVLA, and police services were among those impacted. The NCSC issued 50,000 warnings to businesses and organizations to patch or disconnect vulnerable systems. The NSA urged organizations to take immediate action. As of the report, there were no confirmed compromises of central government systems or the wider UK public sector. The vulnerabilities could allow unauthenticated attackers to execute code on vulnerable servers, leading to millions of attempts to weaponize the flaws.
Key Points
32 UK government services were unavailable due to PHP2Shell vulnerabilities, including the OBR, DVLA, and police services.
The NCSC sent 50,000 warnings to businesses and organizations to patch or disconnect vulnerable systems.
The NSA urged organizations to patch or disconnect vulnerable systems to prevent exploitation.
Cloudflare recorded millions of attempts to weaponize the PHP2Shell vulnerabilities.
Google's Wiz and OpenAI independently uncovered the flaws using AI tools.
Why It Matters
If you're managing PHP-based systems, PHP2Shell vulnerabilities could impact your services. The NCSC warned organizations to patch immediately or disconnect affected systems. The NSA urged immediate action to prevent exploitation. Millions of attempts to weaponize the flaws have been recorded.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.
Join 3,569 builders reading daily.