⚠️ #SW_ISAC_ADVISORY
Service providers operating PHP-based platforms please take note of PHP critical vulnerabilities, both rated CVSS v4.0 9.2
Major government and ecommerce services have shut down pending the patch. Exploits are already circulating.
Shut your service down now, and ensure it doesn't have Internet access on restart.
A patch is scheduled for Wednesday, 21 October 2026 at 14:00 UTC
0100 AEDT
2300 JST
1600 CST
1500 BST
1000 EST
0700 PST
https://cert.europa.eu/publications/security-advisories/2026-018/
IFTAS
npub1y2…2kvzk
2026-10-21 12:49:52 UTC
Author Public Key
npub1y2r2mwt42zufw0dr9kmfz4sjdcan0f3azekpkpp2qlvf8x39cqsqx2kvzkSeen on
wss://relay.momostr.pinkPublished at
2026-10-21 12:49:52 UTCEvent JSON
{
"id": "00947a207ede046a4b8644d5ff32a662472c13c96942634a8e7d1811d07659aa",
"pubkey": "2286adb97550b8973da32db69156126e3b37a63d166c1b042a07d8939a25c020",
"created_at": 1792586992,
"kind": 1,
"tags": [
[
"proxy",
"https://mastodon.iftas.org/@iftas/117478981167413871",
"web"
],
[
"t",
"sw_isac_advisory"
],
[
"proxy",
"https://mastodon.iftas.org/users/iftas/statuses/117478981167413871",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://mastodon.iftas.org/users/iftas/statuses/117478981167413871",
"pink.momostr"
],
[
"-"
]
],
"content": "⚠️ #SW_ISAC_ADVISORY \n\nService providers operating PHP-based platforms please take note of PHP critical vulnerabilities, both rated CVSS v4.0 9.2\n\nMajor government and ecommerce services have shut down pending the patch. Exploits are already circulating. \n\nShut your service down now, and ensure it doesn't have Internet access on restart.\n\nA patch is scheduled for Wednesday, 21 October 2026 at 14:00 UTC\n\n0100 AEDT\n2300 JST\n1600 CST\n1500 BST\n1000 EST\n0700 PST\n\nhttps://cert.europa.eu/publications/security-advisories/2026-018/",
"sig": "6dd7fd22d65396af04a392659eba0da2198bab45d165a6a8256ede10ee8791872137a2772c6389849b3002fb26dc190dace49b161f58e89915aebfd52123eafa"
}