Ghana Warns of Critical PHP Vulnerabilities Threatening Websites and Servers

Ghana’s Cyber Security Authority (CSA) and the National Information Technology Agency (NITA) have issued a joint cybersecurity alert warning government institutions, businesses, website owners, hosting providers and operators of Critical Information Infrastructure about two serious vulnerabilities affecting PHP, a programming language widely used to power websites and online services. The alert was issued in Accra on October 22, 2026. The vulnerabilities, identified as CVE-2026-109618 and CVE-20