News by Levels · Level 2 · Student worksheet

PHP Issues Emergency Security Updates

Name: __________________________ Date: __________________

Read the story

PHP's security team urged users to update after releasing fixes for two critical vulnerabilities on October 21.

The flaws can allow unauthenticated code execution. Editing website pages does not repair PHP itself. Hosting providers may supply patched packages for an existing version.

Source: PHP security team, 2026-10-21. https://www.php.net/archive/2026.php

Read and practise

1. What can the vulnerabilities allow an attacker to do?

   1. Change only the appearance of a news headline
   2. Run code on a server without signing in
   3. Read only information already made public

2. Which action addresses the software problem described?

   1. Whether the hosting provider has installed the PHP fixes
   2. Whether they have rewritten their homepage
   3. Whether they have deleted their browser history

Your turn

Why would editing a website’s articles not be enough to fix this issue?

________________________________________________________________
________________________________________________________________
________________________________________________________________

Read online: https://newsbylevels.com/news/php-critical-security-fixes-october-2026/level-2/