The National Cyber Security Authority (AKSK) issued a warning on Wednesday to institutions, businesses and system administrators regarding two critical vulnerabilities affecting websites and web applications.
According to the announcement, these vulnerabilities could allow unauthorized individuals to execute code remotely, directly threatening the security of systems and data.
Full statement:
The National Cyber Security Authority (AKSK) informs institutions, businesses, organizations and system administrators about two critical vulnerabilities in PHP, a technology widely used to power websites and web applications.
Exploiting these vulnerabilities could allow unauthorized remote code execution, putting systems and data at risk.
The vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619, are related to how PHP manages memory and its internal state when processing requests. Both are classified as critical, with a severity score of 9.2 out of 10 under CVSS v4.0.
Security updates have been released to address these vulnerabilities. Administrators are advised to check the versions currently in use and install the appropriate patched versions.
PHP versions 5.4 through 8.1 are also affected and no longer receive official security updates from the PHP project.
Recommended Measures
AKSK recommends immediately checking the PHP versions used across systems and applications and installing security updates from official sources or relevant providers.
In addition to updating their systems, administrators should create backups and monitor for suspicious activity.
Upgrading to a patched version remains the primary measure for fully addressing these vulnerabilities. Temporary measures to limit exposure are not a substitute for installing security updates.
AKSK urges all organizations using PHP to prioritize these measures to reduce the risk of system compromise and protect their digital data and services.
The post National Cyber Security Authority: Two Critical Vulnerabilities Threaten the Security of Websites and Web Applications appeared first on Euronews Albania.
