Is itCheck something

Attack list

PHP

3 attacked bugs

Yes. Attackers are using PHP bugs right now.

What to do

Ask whoever runs it (your web host or IT team) to install the vendor's latest security update now.

Attackers keep using these against anything that hasn't updated. Updating closes them.

BugConfirmed in attacks

  1. Hackers can take over websites running PHP without a loginCVE-2026-109618Oct 26, 2026
  2. Hackers can take over websites running PHP without a loginCVE-2026-109619Oct 26, 2026
  3. PHP FastCGI Process Manager (FPM) bug: process manager (fpm) buffer overflowCVE-2019-11043Mar 25, 2022

From the US government's list of bugs confirmed in real attacks (CISA KEV). Check everything you use.