Governments in Finland and the Netherlands have taken several public websites offline. This comes after cybersecurity agencies warned of two critical vulnerabilities in PHP. Finland’s government said it had shut down public-facing digital services as a precaution.
In the Netherlands, authorities pulled down sites including the parliament’s website, the MijnOverheid citizen portal, the DigiD identity service, and the national cybersecurity centre’s platform. Several municipal and public-service websites also went dark.
Cybersecurity experts rated the vulnerabilities at 9.2 on the CVSS scale, placing them in the critical category. The main concern is unauthenticated remote code execution, a flaw that can let attackers run commands on a server from anywhere in the world.
If exploited, such a weakness could allow hackers to install malware, steal sensitive records, alter website content, or seize control of government systems. Officials stressed that they had not confirmed active exploitation, but said the potential impact justified immediate preventive action.
The moves followed warnings from the European Union’s Computer Emergency Response Team, which said the flaws could allow attackers to execute malicious code on affected servers without needing valid login credentials.
The PHP maintainers prepared a security patch, and authorities urged organizations to install it as soon as it became available. Cybersecurity agencies in Finland, the Netherlands, and the United Kingdom advised system administrators to update PHP-based systems without delay.
PHP powers a vast portion of the web, with industry estimates suggesting it supports roughly 70 per cent of websites. Its widespread use means a serious flaw can expose governments, businesses, banks, and consumer platforms at the same time.
Officials said organizations that could not patch quickly should take vulnerable services offline until they had secured them. That advice explains the wave of precautionary shutdowns across European government networks.
Also Read: Are Systems Ready for Quantum-Resistant Cybersecurity?