BREAKING: Cran warns about PHP vulnerability

The Communications Regulatory Authority of Namibia (Cran) and the Namibia Cybersecurity Incidence Response Team (Nam-CSIRT) has warned of a vulnerability identified in PHP, specifically PHP2Shell. PHP is a coding language commonly used for websites.

The vulnerability could allow remote code execution enabling malicious actors to gain unauthorized access to systems and may put sensitive information, such as login credentials and other information in a database, at risk. Complete takeover is also possible.

PHP versions 8.1 and older are especially affected by this as no upgrade is available. PHP 8.2 to 8.5 versions are to be upgraded in order to patch the vulnerability.

Cran and Nam-CSIRT advise the review of websites, web servers, applocations and third-party products that use PHP and immediate upgrades. Internet-facing systems are to be prioritised, access controls to be reviewed and cyber infrastructure to be monitored for signs of compromise.

In the event that immediate security patching may not be possible, Cran and Nam-CSIRT advise restricting or isolating services until it can be done.

This follows after the PHP vulnerability was first identified on 11 August and several various European government agencies shutting down websites since Wednesday. The patches were officially released by the PHP organisation at 13:45 local time yesterday.

- Iréne-Mari van der Walt