DOUBLE YELLOW FLAG

Japan's government urges fast fix of PHP vulnerability; sites may be taken offline

Original title：古川大臣記者会見（令和8年10月23日）要旨を掲載しました

デジタル庁新着 · First reported 2026.10.27 12:41 JST
Exploitation reported (unconfirmed) · Confirmed by primary source

What happened

At a press conference, Japan's Digital Minister asked companies to apply PHP security patches as soon as possible. If patching is hard, temporarily taking sites offline should be considered; no related damage has been reported to the government so far.

Who is affected

Anyone running a PHP-based website
Operators of PHP CMS such as WordPress
Agencies managing PHP sites for clients

What to do

Check your PHP version and update to the fixed release from your host or official sources right away. If you cannot patch quickly, consider temporarily taking the site offline to reduce risk.

Affected products

Product	Affected	Fixed in
PHP	要確認	要確認

Why this flag

ウェブサイトの約7割で使われるとされるPHPが対象で影響が広く、攻撃が行われたとの報道があるが、会見では被害の報告はなく公式な悪用確認ではないため。

Double yellow: great danger, be ready to stop — Severe impact with a public exploit or reported (unconfirmed) exploitation, including RED candidates under review.

Sources

Primary source：デジタル庁新着 ↗