MIIT Warns of High-Risk PHP Vulnerability as Francis Fong Urges Updates and Patches
Start here
On 22 October 2026, the Ministry of Industry and Information Technology published a risk advisory on guarding against a critical remote code execution vulnerability in PHP, recommending that relevant organisations and users immediately conduct comprehensive checks and upgrade to the latest secure version. On the same day, Francis Fong, Honorary President of the Hong Kong Information Technology Federation, said he believed installing the latest official security patch would fix the vulnerability, and called on website owners to notify users that the vulnerability had been fixed. The matter currently stands at the MIIT issuing the risk advisory and an industry figure responding; the report did not mention whether any websites were affected or whether the vulnerability had been exploited.
Generated by AI from reporting · updated 2 hours ago
Reporting timeline
Follow the reports to explore different aspects of the story.
- 香港電台·即時本地Fong Po-kiu: Installing Latest Official Security Patch Expected to Fix PHP Vulnerability
The Ministry of Industry and Information Technology has issued a risk advisory on preventing a critical remote code execution vulnerability in PHP, recommending that relevant organisations and users immediately conduct comprehensive checks and upgrade to the latest secure version. Information Technology Chamber honorary president Fong Po-kiu believes installing the latest official security patch can fix the vulnerability, and calls on website owners to notify users that the vulnerability has been fixed.
Activity over time for this story
There are not enough continuous observations to draw a trend yet.