字号·· | 护眼
阿纳多卢通讯社

日本因PHP严重安全漏洞暂停多个网站Japan suspends several websites over critical PHP security vulnerabilities

点「原文对照」整页切到原文,或双击某段只看那段的原文。

据共同社报道,日本周三在广泛使用的PHP编程语言中发现严重漏洞后,暂停了包括政府服务在内的多个网站。

Japan suspended several websites, including government services, Wednesday after critical vulnerabilities were discovered in the widely used PHP programming language, according to Kyodo news agency.

共同社报道,厚生劳动省作为预防措施暂时停止了其信息公开系统网站。

The Health, Labor and Welfare Ministry temporarily suspended a website for its information disclosure system as a precaution, the news agency reported.

在线商店服务BASE也启动了紧急维护,而东京外国语大学下令对其网络服务器进行紧急检查。樱花互联网公司因安全担忧暂停了部分服务功能。

Online store service BASE also launched emergency maintenance, while Tokyo University of Foreign Studies ordered an urgent inspection of its web servers. Sakura Internet Inc. suspended some service functions in response to the security concerns.

日本国家网络安全中心敦促用户安装安全补丁。一名政府官员表示:“我们正在密切关注事态发展。”

Japan's National Cybersecurity Office urged users to install security patches. "We are closely monitoring the situation," a government official said.

澳大利亚信号局也建议组织和个人监控其PHP应用程序,并准备应用更新。

Australia's Signals Directorate also advised organizations and individuals to monitor their PHP applications and prepare to apply updates.

开发者警告远程代码执行风险 PHP开发者周三在确认两个严重漏洞后,敦促用户立即安装安全更新,这些漏洞可能允许攻击者远程执行恶意代码。

Developers warn of remote code execution risks PHP developers urged users Wednesday to install security updates immediately after identifying two critical vulnerabilities that could allow attackers to execute malicious code remotely.

开发者发布了修补版本,并警告称攻击者无需身份验证即可利用这些缺陷。

The developers released patched versions and warned that attackers could exploit the flaws without authentication.

PHP团队在一份安全公告中表示,所有处理网络请求的安装都可能面临风险。

In a security advisory, the PHP team said all installations handling web requests were potentially at risk.

这些漏洞被标识为CVE-2026-109618和CVE-2026-109619,涉及内存处理错误和可在请求间持久存在的过时内部状态。这些缺陷可能允许攻击者在受影响的服务器上执行恶意代码。

The vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619, involve memory-handling errors and outdated internal states that can persist between requests. The flaws could allow attackers to execute malicious code on affected servers.

PHP在互联网上被广泛使用,这意味着未修补的系统可能为攻击者提供重大机会。

PHP is used extensively across the internet, meaning unpatched systems could present significant opportunities for attackers.

阅读媒体原文 ↗