📷 Image: Wikimedia Commons / Yann Forget
Technology
MP-CERT issues high alert over PHP flaws exposing government websites to data breach
✍️ Amar Ujala · Madhya Pradesh
🗓 28 Oct 2026, 10:31 AM
👁 14
The Madhya Pradesh Computer Emergency Response Team warned that two PHP software vulnerabilities could let hackers infiltrate government servers and steal sensitive information.
The Madhya Pradesh Computer Emergency Response Team (MP-CERT) has issued a high‑level security alert for all state‑run websites. The warning follows the discovery of two critical flaws in the PHP software that powers many of the portals.
According to MP‑CERT, the vulnerabilities can be exploited to gain unauthorized access to the underlying servers. Once inside, attackers could retrieve databases, user credentials and other confidential records hosted on the sites.
The agency stressed that the risk is immediate and could affect any government portal that relies on the affected PHP versions. It has urged website administrators to apply patches, update to the latest software releases, and conduct thorough security audits.
MP‑CERT also recommended that agencies monitor network traffic for suspicious activity and rotate passwords for privileged accounts as a precautionary measure.
According to MP‑CERT, the vulnerabilities can be exploited to gain unauthorized access to the underlying servers. Once inside, attackers could retrieve databases, user credentials and other confidential records hosted on the sites.
The agency stressed that the risk is immediate and could affect any government portal that relies on the affected PHP versions. It has urged website administrators to apply patches, update to the latest software releases, and conduct thorough security audits.
MP‑CERT also recommended that agencies monitor network traffic for suspicious activity and rotate passwords for privileged accounts as a precautionary measure.