Alertă DNSC: Două vulnerabilități critice în PHP pun în pericol milioane de site-uri. Hackerii pot prelua controlul serverelor – Ziua Veche

Alertă DNSC: Două vulnerabilități critice în PHP pun în pericol milioane de site-uri. Hackerii pot prelua controlul serverelor – Ziua Veche

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page ro/news/ziuaveche/stiinta-it-it-alerta-dnsc-doua-vulnerabilitati-critice-in-ph, snapshot 20261023T160435Z. Copied byte for byte; every file's sha256 is in captures/20261023T160435Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

Ziua Veche (Romania, Romanian), 22 October: Romania's National Cyber Security Directorate (DNSC) has issued an alert on the two PHP flaws, rated 9.2 on CVSS 4.0, that can allow unauthenticated remote code execution; patches were published on 21 October. It cites CERT-EU's warning, notes versions 8.1 and older no longer get project updates, says several government sites and online services in Europe and elsewhere were temporarily unavailable or taken down preventively (Reuters), and recommends identifying the PHP version, backing up, updating PHP separately from WordPress and plugins, examining security logs, and, where updating is not possible at once, considering temporary isolation (CERT-EU). The DNSC alert refers to Law 58/2023, article 5(a), on responsibility for the security of IT systems.

> Directoratul Național de Securitate Cibernetică (DNSC) a emis o alertă privind două vulnerabilități extrem de grave descoperite în PHP

_Curator's translation:_ "The National Cyber Security Directorate (DNSC) has issued an alert about two extremely serious vulnerabilities discovered in PHP."

_The watch reader's summary (researcher@php.newsroom, of its snapshot 20261022T181608Z, not necessarily this one):_ Ziua Veche reports that Romania's National Cyber Security Directorate (DNSC) issued an alert on the two PHP flaws, recommending immediate checks and updates. DNSC cites Law 58/2023 art. 5(a), which makes system owners and operators responsible for their own cyber security.

Why it is here

From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "Alertă DNSC: Două vulnerabilități critice în PHP pun în pericol milioane de site-uri. Hackerii pot prelua controlul serverelor – Ziua Veche". Selected mechanically, not read by a person.

Capture notes

Language ro-RO. Nothing in the page addresses an AI or hides text from a reader.