From BigGo Finance · BigGo Finance · · 1m
PHP Vulnerability Affects Japanese Finance and Rail
Japanese banks and railways halt services after PHP security flaw.
In brief
Japanese banks and railways halt services after PHP security flaw. Japanese financial institutions and railway operators suspended online services due to critical PHP vulnerabilities. Originally reported by BigGo Finance.
Critical PHP Vulnerabilities
Two PHP vulnerabilities rated 9.2 on CVSS scale were discovered.
Immediate Patch Release
PHP development project released patched versions at 11 p.m. on the 21st.
Financial Institutions Respond
Shizuoka Bank, The 77 Bank, Mizuho Bank and Daiwa Securities suspended online services.
Internet Services Halted
Sakura Internet, BASE and Keihan Holdings temporarily suspended some services.
Railway Operators Impact
Hanshin Electric Railway and Japan Airlines halted corporate website functions.
Government Response
Prime Minister Sanae Takaichi called for emergency action on X.
Vulnerability Details
CVE-2026-109618 and CVE-2:2026-109619 allow remote code execution without authentication.
Patch Impact
PHP 8.2.35, 8.3.36, 8.4.27 and 8.5.12 patched versions released for immediate update.
No Payment Impact Confirmed
Japanese Bankers Association confirmed no impact on interbank settlement.
In short
Japanese financial institutions and railway operators suspended online services due to critical PHP vulnerabilities.
