Nepal takes government websites offline over critical PHP flaws
Summary
Nepal has taken government websites offline to fix two critical PHP security flaws that could allow remote code execution on affected servers. The National Cyber Security Centre has urged organisations to patch or isolate vulnerable systems while emergency updates are applied.
Key Points
- Nepal temporarily took online government systems offline after two critical PHP vulnerabilities were disclosed.
- The Software Development and Operation Centre said it formed an emergency team and shut systems down as a precaution against possible breaches.
- The National Cyber Security Centre urged organisations to upgrade PHP installations to patched versions and isolate vulnerable services if updates cannot be applied immediately.
- Similar precautionary shutdowns were reported in several other countries, including Germany, France, the Netherlands, Finland and the Czech Republic.
