🇦🇺 English, 24 October 2026, government vulnerability
Government issues urgent cybersecurity update to all state institutions
Government institutions must address critical security vulnerabilities in PHP-based websites and web applications.
The Ministry of Digital Economy has directed all government institutions to take immediate action to address critical security vulnerabilities affecting websites and web applications developed using PHP software.
The vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619, could expose government systems to unauthorized access, data theft, and operational disruptions.
Government institutions have been instructed to identify all systems and web applications using PHP, verify their software versions, and install relevant security updates.