Tokyo, 23 October 2026 – Japan is preparing cyberattack simulations after two critical vulnerabilities were disclosed in PHP, the software language used by a large share of the world’s websites. The flaws, tracked as CVE-2026-109618 and CVE-2026-109619, can permit unauthenticated remote code execution on affected servers if they remain unpatched.
The issue matters to Asian companies because PHP underpins public websites, commerce systems and internal applications throughout the region. The vulnerabilities and released patches are confirmed; exploitation risk depends on system configuration, internet exposure and whether administrators act promptly. Japanese authorities have reported precautionary service suspensions rather than confirmed widespread damage.
Unlock the Full Article
This article is exclusive to The Ledger Asia Subsribers / PAID members.
Already have an account? Log in here