[CLSTR]
API
< Back to all clusters
[TECHNOLOGY] · Latvia · 6 sources

started · updated

Latvia implements security measures following critical PHP vulnerabilities

PHP vulnerabilities Cert.lv cybersecurity CVE-2026-109618 Latvia

Latvia has implemented preventive security measures following the discovery of two critical vulnerabilities in the PHP programming language, identified as CVE-2026-109618 and CVE-2026-109619. These vulnerabilities, which carry a CVSS v4.0 severity rating of 9.2 out of 10, could allow unauthenticated attackers to execute commands on affected systems.

Cert.lv, the national cyber incident response institution, reported that automated attempts to exploit these vulnerabilities have already been observed targeting both private and public information systems in Latvia. While these initial bot-driven attacks have not been successful, officials warned that less protected resources could be at risk.

To mitigate risks, access to several Latvian digital resources has been temporarily restricted from foreign locations. Approximately 6,000 digital resources in Latvia are potentially affected, including several hundred in the public sector. PHP developers are expected to release security patches on Wednesday at 17:00 local time.

Entities

Cert.lv · Latvia · PHP · Varis Teivāns

Claims

What the coverage asserts, and how many sources carry each claim.

  • [● 3 SOURCES] Unauthenticated attackers could potentially execute commands on affected systems using these vulnerabilities. www.ogrenet.lv · pmo.ee
  • [● 3 SOURCES] Latvia has temporarily restricted access to several digital resources from foreign locations to protect state information systems. www.ogrenet.lv · pmo.ee
  • [● 3 SOURCES] Two critical security vulnerabilities, CVE-2026-109618 and CVE-2026-109619, were discovered in the PHP programming language. www.ogrenet.lv · pmo.ee
  • [○ 1 SOURCE] The vulnerabilities have a CVSS v4.0 severity rating of 9.2 out of 10. www.ogrenet.lv
  • [● 2 SOURCES] Approximately 6,000 digital resources in Latvia are potentially affected by these vulnerabilities. pmo.ee
  • [○ 1 SOURCE] PHP developers are scheduled to release security patches on Wednesday at 17:00 Latvian time. www.ogrenet.lv
  • [● 2 SOURCES] Automated attempts to exploit the vulnerabilities have been observed in Latvia targeting both private and public sectors. pmo.ee

Sources

Valsts iestāžu mājaslapas bija jāierobežo kiberapdraudējuma dēļ – “Cert.lv” atklāj, vai hakeriem izdevās ielauzties [www.la.lv]
"Cert.lv" novērojis atsevišķus mēģinājumus izmantot PHP ievainojamības kiberuzbrukumos [pmo.ee]
CERT.LV pavēsta, vai Latvija cietusi no kiberuzbrukumiem PHP ievainojamību dēļ [jauns.lv]
VIDEO ⟩ Latvijā jau fiksēti pirmie mēģinājumi izmantot kritiskās PHP ievainojamības [pmo.ee]
Uz laiku aptur daudzu mājaslapu darbību – arī Ogres novada pašvaldības mājaslapa pašlaik nav pieejama - OGRENET - Tava novada portāls [www.ogrenet.lv]
Latvijā pakāpeniski atjauno piekļuvi valsts iestāžu mājaslapām [auseklis.lv]