Poland faces PHP security crisis and legislative debates

Poland is responding to a global cybersecurity crisis caused by two critical vulnerabilities in the PHP programming language, known as ‘PHP2Shell’ (CVE-2026-109618 and CVE-2026-109619). In response, the Central Information Center has temporarily taken several Public Information Bulletin websites offline, and the Ministry of Digital Affairs has issued urgent warnings regarding unauthorized server control.

Separately, the Polish government is working on a draft law regarding ‘limiting measures’ that includes establishing rules for sanctions against individuals and enterprises. Critics argue the legislation could lead to censorship by allowing the state to freeze financial resources or restrict transactions based on criteria such as ‘supporting foreign interference in the information environment of the Republic of Poland.’

In other developments, Poland is seeking to negotiate longer deadlines for the EU’s SAFE program in Brussels to ensure contract fulfillment, and recent data indicates that nearly 40 percent of the Polish population now uses artificial intelligence.