21/10/2026
If your business has a website, customer portal, e-commerce platform or bespoke software, this is worth knowing about š¤
PHP has issued an unusual advance warning about two critical security vulnerabilities, both scoring 9.2 out of 10 for severity.
The fixes are due to be released today, and PHP hasnāt yet confirmed exactly which versions are affected.
So, what does that mean for businesses?
PHP sits behind a huge amount of the web and is used in software and systems that businesses rely on every day.
Most business owners wonāt know whether their systems use PHP, what version theyāre running or whether theyāre affected by a newly discovered vulnerability.
They shouldnāt necessarily need to.
Someone, however, does need to know.
When a critical vulnerability is announced, the questions quickly become:
- Are our systems affected?
- Where are we using PHP?
- Which versions are we running?
- Does the vulnerability actually expose us?
- How quickly do we need to act?
At Code Galaxy, weāve spent nearly a decade building, maintaining and inheriting software for businesses across the UK.
We know how quickly codebases evolve.
Dependencies are added. Technology gets older. Developers change. Systems grow.
Over time, vulnerabilities can exist within the software a business relies on without anyone necessarily knowing theyāre there.
Itās one of the reasons we built Hacka AI.
Hacka analyses the source code behind your software to identify vulnerabilities, exposed secrets and supply-chain risks. It then goes further, helping to establish whatās genuinely exploitable, what should be prioritised and how it can be fixed.
For businesses concerned about todayās PHP announcement, the immediate advice is simple:
Speak to whoever manages your website or software. Find out whether youāre using PHP and which version youāre running. Once the affected versions and patches are confirmed, establish whether youāre exposed and update accordingly.
The bigger lesson goes beyond PHP.
New vulnerabilities are discovered all the time.
Knowing whatās inside the software your business relies on puts you in a much stronger position to respond when they are.
Find the weaknesses before somebody else does š