Korea and Japan Respond Urgently to Critical PHP Security Vulnerability (CVSS 9.2)... Used by 70% of Websites Worldwide, 'Immediate Update' Recommended
Korea and Japan have launched an urgent response after two critical security vulnerabilities were discovered in PHP, a programming language widely used on websites around the world. According to a report by Japan's Asahi Shimbun on the 22nd, corporate websites and online services in Japan are being

Korea and Japan have launched an urgent response after two critical security vulnerabilities were discovered in PHP, a programming language widely used on websites around the world.
According to a report by Japan's Asahi Shimbun on the 22nd, corporate websites and online services in Japan are being temporarily suspended one after another as work proceeds to fix the PHP security vulnerabilities. According to web technology research firm W3Techs, PHP is used by approximately 70% of websites worldwide.
The two vulnerabilities discovered this time each scored 9.2 on CVSS, an international security risk assessment metric. In South Korea, the Ministry of Science and ICT and the Korea Internet & Security Agency (KISA) have also requested that relevant companies take security measures.
Meanwhile, the PHP development team has released versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35, which fix the vulnerabilities, and recommended immediate updates.
CBC Globe publishes verified stories with editorial review, source checks, and tenant-specific publication standards.
![[Breaking] Yonsei University Personal Data Breach... Abnormal External Access to Yonsei Portal; Damage Confirmation and Call Center Contact Available from 1 PM on the 22nd](/_next/image?url=https%3A%2F%2Fmedia.cbcglobe.com%2Ftenants%2Fcbc00000-0000-4000-8000-000000000001%2Fmedia%2Fcbc%2F2026%2F10%2F618228%2F16faff323813fb1c%2Fvariants%2Fhero.webp&w=1920&q=75)


