10/21/2026
***If you operate a server, you need to update your PHP version as soon as possible.***
Multiple separate, severe security vulnerabilities were announced today.
>>>Two vulnerabilities in the PHP web scripting language (used in many web servers) were announced today that severely compromise the security of those servers.
Some governments have taken their websites offline as a precaution, and it's possible that other website owners may follow suit while they patch their security.
>>>Another, unrelated, severe vulnerability was announced regarding the Trusted SSL Certificates used for most website security. eMudhra, a Certificate Authority in India, issued botched certificates 18 months ago, that allow breaching and faking of website security worldwide.
***Ordinary users should install available software updates. Chrome, Firefox, and Safari web browsers have already started blocking the eight bad eMudhra certificates . Users of other web browsers should check the news for their particular browsers to make sure they're also blocking the bad certs.***