NACSA Urges Local Organisations To Immediately Patch Internet-Facing PHP Systems

Lowyat.NET · 22/10/2026, 9:05:25 PG

The National Cyber Security Agency (NACSA), through its National Cyber Coordination and Control Centre (NC4), is urging organisations running internet-facing PHP applications to immediately install security updates and conduct vulnerability assessments following the discovery of two critical vulnerabilities. Known collectively as PHP2Shell, the flaws are tracked as CVE-2026-109618 and CVE-2026-109619. The PHP security team released […] The post NACSA Urges Local Organisations To Immediately Patch Internet-Facing PHP Systems appeared first on Lowyat.NET .