Drupal patched critical CVE-2026-108097, a Field UI flaw enabling unauthenticated remote code execution and website takeover.

Some organizations have temporarily taken websites and online services offline rather than leave vulnerable systems exposed.

Two critical PHP vulnerabilities have prompted NSA warnings and government website shutdowns. Learn why millions of websites could be at risk.

Two critical vulnerabilities have been identified with PHP, a programming language which is widely used across the internet.

Two critical PHP vulnerabilities could allow attackers to compromise web servers without authentication, prompting emergency ...

Nepal temporarily took government online systems offline after critical PHP vulnerabilities were disclosed, while some ...

Explore the latest news, real-world incidents, expert analysis, and trends in Drupal — only on The Hacker News, the leading ...

WEST PALM BEACH, FL - The PHP development team released emergency security updates on October 21, 2026, addressing two ...

Critical vulnerabilities in PHP prompted emergency patches and temporary shutdowns of government and other sites.

AI-discovered PHP vulnerabilities have triggered website shutdowns across Europe, with governments and cybersecurity agencies ...