The European Commission, ENISA, CERT-EU, Europol EC3, and the EU CSIRTs network issued a joint statement on 21 October 2026. The statement advises organizations to take immediate action to address two critical vulnerabilities in PHP, a programming language widely used for websites and applications.
The joint statement does not specify an instrument or provision but emphasizes the urgency of addressing the vulnerabilities. Organizations are encouraged to assess their systems and implement necessary updates or patches.
The advisory applies to all organizations involved in digital services and applications, particularly those in the fintech and crypto sectors. These sectors face significant risks from security breaches, which can lead to financial and reputational damage.
The statement does not mention a specific deadline for compliance but stresses the importance of immediate action to ensure operational resilience and adherence to cybersecurity best practices.
Source: European Commission, official publication, retrieved 2026-10-22