Kinshasa, October 22nd, 2026 (CPA).– The Ministry of the Digital Economy of the Democratic Republic of the Congo (DRC) issued a warning on Wednesday regarding the existence of two serious security vulnerabilities in an IT technology used to operate numerous websites, according to a press release seen by the CPA on Thursday.
“The Ministry of the Digital Economy informs the public that two critical vulnerabilities, referenced as CVE-2026-109618 and CVE-2026-109619, have been reported internationally in PHP, a technology widely used to run websites and digital platforms,” the statement read.
According to the source, these vulnerabilities pose significant risks to the security of servers and hosted data.
The press release stated that the Ministry wishes to reassure users and stakeholders in the public digital ecosystem that technical measures to prevent and secure systems are being implemented, notably updating PHP versions and applying the available security patches to the affected servers.
The Ministry has called on public administrations, digital platform operators and technical service providers to check the PHP versions used on their infrastructure apply official updates and security patches without delay, step up server monitoring and report any suspicious activity to the relevant authorities, the document reported.
“The Ministry in charge of the Digital Economy reaffirms its commitment to strengthening the security, resilience and continuity of digital services in the Democratic Republic of the Congo,” the document stated. PHP is a computer programming language designed to create web applications. ACP/