{"id":935973,"date":"2026-10-21T09:08:12","date_gmt":"2026-10-21T09:08:12","guid":{"rendered":"https:\/\/www.newsbeep.com\/au\/935973\/"},"modified":"2026-10-21T09:08:12","modified_gmt":"2026-10-21T09:08:12","slug":"asd-rushes-out-critical-alert-on-unpatched-php-vulnerability","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/au\/935973\/","title":{"rendered":"ASD rushes out \u2018critical\u2019 alert on unpatched PHP vulnerability"},"content":{"rendered":"<p class=\"wp-block-paragraph\">The Australian Signals Directorate has put Australian government agencies and businesses on high alert over an unpatched security hole in the almost endemic web scripting language PHP that jumped the fence into the wild before a fix was released.<\/p>\n<p class=\"wp-block-paragraph\">The <a href=\"https:\/\/www.cyber.gov.au\/alert\/critical-vulnerabilities-in-php\" rel=\"nofollow noopener\" target=\"_blank\">top-level alarm was rung on Wednesday afternoon,<\/a> with ASD saying that \u201cPHP Foundation has published advanced notice of critical vulnerabilities; organisations are recommended to monitor for the release of relevant patches to address these vulnerabilities\u201d.<\/p>\n<p class=\"wp-block-paragraph\">\u201cThe Australian Signals Directorate\u2019s Australian Cyber Security Centre (ASD\u2019s ACSC) is aware of related media reporting which identifies these vulnerabilities as CVE-2026-109618 and CVE-2026-109619, though no official technical details have been publicly released at this time,\u201d ASD said, adding it \u201cunderstands that all PHP versions from PHP 5 onwards may be affected.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"The Australian Signals Directorate has put Australian government agencies and businesses on high alert over an unpatched security&hellip;\n","protected":false},"author":2,"featured_media":935974,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[22520,64,63,147510,72492,502777,502778,8886,114619,114614,116709,502779,105,82426],"class_list":["post-935973","post","type-post","status-publish","format-standard","has-post-thumbnail","category-technology","tag-asd","tag-au","tag-australia","tag-australian-signals-directorate","tag-cyber","tag-drupal","tag-govcms","tag-hacking","tag-joomla","tag-php","tag-ransomware","tag-rce","tag-technology","tag-wordpress"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/posts\/935973","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/comments?post=935973"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/posts\/935973\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/media\/935974"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/media?parent=935973"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/categories?post=935973"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/tags?post=935973"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}