The Cybersecurity Presidency has launched a nationwide scan of systems, particularly those operated by public institutions, to address high-risk security vulnerabilities detected in PHP infrastructure.
The Presidency said the vulnerabilities, known as “PHP2Shell,” can under certain conditions allow attackers to execute code remotely without authentication. It said the vulnerabilities pose a risk of unauthorized access and data breaches, especially in systems exposed to the internet, and could also affect the continuity of digital services.

An urgent security alert was sent to all institutions and organizations, as well as critical infrastructure operators, through the Cyber Incident Response Teams Communication Platform. System administrators were urged to review their internet-facing infrastructure and promptly apply the published security updates.
Vulnerabilities in PHP have also led to the temporary shutdown of numerous websites worldwide, while cybersecurity agencies in Europe and the United Kingdom recommended disconnecting systems that could not be patched from the network.