PHP Issues Emergency Security Updates

Adapted by News by Levels October 22, 2026

Two flaws affect software that handles web requests.

Level 1 Level 2 Level 3

Your learning

Loading your learning…

Technology news editorial illustration for PHP Releases Urgent Fixes for Two Critical Security Flaws

Beginner support · Translation help

Read with help in your language

Choose a language to see each paragraph translated below the English. Tap highlighted words for a quick meaning.

Your language

to for on 21.

The . not . for an .

Source: PHP security team, 2026-10-21.

Read · Think · Practise

Try this story

Try 2 questions about this story, then explain one idea in your own words. Check the text whenever you need to.

Print a worksheet · Teacher guide & answers

Read and understand · 1/2What can the vulnerabilities allow an attacker to do? Change only the appearance of a news headline Run code on a server without signing in Read only information already made public

Read the answer and explanation

Run code on a server without signing in. The text describes code execution without authentication, not just a visual error.

Clue: The flaws can allow unauthenticated code execution. Editing website pages does not repair PHP itself. Hosting providers may supply patched packages for an existing version.

Read and understand · 2/2Which action addresses the software problem described? Whether the hosting provider has installed the PHP fixes Whether they have rewritten their homepage Whether they have deleted their browser history

Read the answer and explanation

Whether the hosting provider has installed the PHP fixes. The fault is in PHP. Changing website text or browser history does not patch the runtime.

Clue: The flaws can allow unauthenticated code execution. Editing website pages does not repair PHP itself. Hosting providers may supply patched packages for an existing version.

Your turn

Why would editing a website’s articles not be enough to fix this issue?

Your answer (not saved or sent)

See one possible answer

The security issue is in PHP on the server. The hosting provider’s installed software needs the relevant fix.

Your answer can be different. Give a reason and use your own words.

0 of 2 questions checked.

Tell us what helped or felt difficult

Which reading level did you try? Was a sentence unclear? Did the questions help you understand the story?

Send feedback by email

PHP Issues Emergency Security Updates

Read with help in your language

Try this story

Your turn

Related stories

UK Sets Out AI Security Investment

Faster Bug Discovery Challenges Defenders

Health Recovery Remains Uneven

A little English in your inbox.