Skip to content
Thursday, 29 October 2026 Icelandic stories. Global audience.
Latest

Icelandic cyber security authority warns of ‘very serious’ PHP vulnerability

CERT-IS, Iceland's national cyber security team, revealed a major vulnerability in the PHP programming language today. The issue, scoring 9.2 out of 10 in severity, has raised concerns for websites in Iceland and abroad.

Stones on a black seashore
File photo.

RÚV reported today that CERT-IS, Iceland’s national cyber security team, issued a stark warning after a major security vulnerability in the PHP programming language was discovered.

CERT-IS described the newly discovered PHP vulnerability as “very serious,” and said the situation is ongoing. “The situation is not over yet,” said Bjarki Þór Sigvarðsson of CERT-IS, as quoted by both RÚV and DV. The cyber security team emphasised that the threat has not yet passed and further vigilance is needed.

The vulnerability received a score of 9.2 out of 10 on a commonly used system to assess computer-system weaknesses, indicating a high severity. The programming language PHP is estimated to be used by about 70% of websites worldwide, raising broad concerns for the safety of digital properties in Iceland and internationally.

Sources