# PHP Vulnerability Affects Japanese Finance and Rail

> Japanese banks and railways halt services after PHP security flaw.
- Title: PHP Vulnerability Affects Japanese Finance and Rail | Shortify
- Summary: Japanese banks and railways halt services after PHP security flaw. Japanese financial institutions and railway operators suspended online services due to…
- Keywords: php, php vulnerability, japanese bankers association, shizuoka bank, the 77 bank, mizuho bank, daiwa securities, sakura internet, base, keihan holdings, hanshin electric railway, japan airlines
- Source: BigGo Finance — https://finance.biggo.com/news/845e9932-a9f8-4863-b6d5-8e290a62bd42
- Author: BigGo Finance
- Published: 2026-10-21T21:25:12+00:00
- Read time: 1 min
- Topics: php, php vulnerability, japanese bankers association, shizuoka bank, the 77 bank, mizuho bank, daiwa securities, sakura internet, base, keihan holdings, hanshin electric railway, japan airlines
## Critical PHP Vulnerabilities
Two PHP vulnerabilities rated 9.2 on CVSS scale were discovered.
## Immediate Patch Release
PHP development project released patched versions at 11 p.m. on the 21st.
## Financial Institutions Respond
Shizuoka Bank, The 77 Bank, Mizuho Bank and Daiwa Securities suspended online services.
## Internet Services Halted
Sakura Internet, BASE and Keihan Holdings temporarily suspended some services.
## Railway Operators Impact
Hanshin Electric Railway and Japan Airlines halted corporate website functions.
## Government Response
Prime Minister Sanae Takaichi called for emergency action on X.
## Vulnerability Details
CVE-2026-109618 and CVE-2:2026-109619 allow remote code execution without authentication.
## Patch Impact
PHP 8.2.35, 8.3.36, 8.4.27 and 8.5.12 patched versions released for immediate update.
## No Payment Impact Confirmed
Japanese Bankers Association confirmed no impact on interbank settlement.
## Key takeaway

Japanese financial institutions and railway operators suspended online services due to critical PHP vulnerabilities.