Two critical PHP flaws trigger emergency website shutdowns across Europe
World · 22 October 2026
Written by AI from multiple news reports
Governments and major websites went offline on October 21 and 22, 2026, after two serious security flaws were found in PHP.
PHP is a programming language that runs about 70 percent of the world's websites. The flaws could let attackers take control of websites without needing a password. Government websites in Germany, France, the Netherlands, and Kenya shut down as a precaution. Wikipedia's parent organisation also took several of its systems offline.
The PHP Foundation released emergency fixes on Wednesday afternoon. Cybersecurity agencies in the UK, Europe, and Australia told organisations to install the fixes immediately or take their sites down. Researchers said that AI tools helped them find the flaws before any hackers could use them. No confirmed breaches were reported.