Two dangerous internet security issues are putting site admins on edge

Both problems could result in large-scale attacks and require massive cleanup.

By Steve Dent Oct. 21, 2026 7:02 am EST R.bussarin/Shutterstock Add Engadget on Google: Google Discover

The web is a bit of a hot mess today following the discovery of two severe vulnerabilities, according to security releases seen by Ars Technica. The first involves TLS certificates with extremely weak encryption that could affect everything from VPNs to IoT devices. The other is a severe PHP programming language vulnerability impacting CMS systems including WordPress and Drupal. Both problems could result in large-scale attacks and require massive cleanup jobs, security experts said.