Cloudflare reported millions of attempted exploits after critical flaws in PHP, one of the world’s most widely used programming languages, were publicly disclosed.
Cloudflare Chief Executive Matthew Prince disclosed the surge in a post on X, underscoring how quickly attackers move once technical details become available.
The vulnerabilities could place websites and online services at risk if they run affected PHP versions and remain unpatched.
Security teams are being urged to review their PHP deployments, apply available updates and monitor systems for unusual activity.
The incident also illustrates the broader challenge facing organizations that depend on widely used open-source software: a single vulnerability can expose thousands of internet-facing applications at once.
Cloudflare’s disclosure did not provide a detailed breakdown of the targeted systems or confirm how many attacks succeeded. However, the scale of the reported attempts signals that the flaws are already attracting automated exploitation efforts.