Finland shuts down government websites after critical PHP vulnerabilities found

Precautionary measure affects multiple public services; patches expected later Wednesday

By LineZotpaper

Published21 October 2026

Read Time2 min

Finland's public internet web services were taken offline on Wednesday as a precaution against two critical vulnerabilities discovered in the PHP software that powers many government sites, the Government ICT Centre (Valtori) announced. The shutdowns began in the early afternoon, with a fix expected by 5pm Finnish time.

The move follows a warning from EU cybersecurity officials that organisations unable to apply patches should take affected webpages offline. PHP developers announced on Wednesday they would issue patches for the two vulnerabilities, which have not yet been actively exploited but could be, according to Finland's Traficom Cyber Security Centre.

Valtori director general Hannu Naumanen told Finnish news service STT that services began shutting down shortly after 1pm. Among the affected sites are the National Land Survey's website, the Helsinki Book Fair's site, and the website of the Finnish Film Foundation (SES). Some of Yle's individual web services also experienced outages.

Naumanen did not specify which other web services would be affected. The vulnerabilities are in PHP, a widely used scripting language that runs on web servers as the back-end backbone for many websites. As of early Wednesday afternoon, there was no indication the vulnerabilities were being actively exploited, but authorities warned the situation could change quickly.

Analysis

Why This Matters

Critical PHP vulnerabilities could allow attackers to compromise servers; Finland's precautionary shutdowns underscore the severity.
The incident highlights the reliance of government infrastructure on commonly used open-source software and the risks of zero-day vulnerabilities.
Readers worldwide using PHP-based sites should monitor for patches; similar shutdowns may occur in other countries.

Background

PHP is a foundational technology for web development, powering a significant portion of websites globally including many government and enterprise systems. Critical vulnerabilities in PHP are rare but can have widespread impact. The EU cybersecurity alert referenced by Finnish authorities suggests coordinated awareness across member states.

Key Perspectives

Valtori and Finnish authorities: Taking a cautious approach to protect government services from potential exploitation before patches are available. PHP developers: Issuing patches for two critical vulnerabilities, working to address the issues promptly. EU cybersecurity officials: Warning organizations to take affected services offline if unable to apply patches, emphasizing the urgency.

What to Watch

Whether the patches released at 5pm Finnish time fully resolve the vulnerabilities.
Any reports of active exploitation after patches become available.
Whether other countries or organisations follow Finland's lead in temporarily shutting down PHP-based services.

Sources

Finland temporarily shuts down government websites as a precaution for critical vulnerabilities · Yle News

Checked

11 claims in this story checked against 1 source: 8 supported.

Show each claim

SupportedFinland temporarily shut down government websites as a precaution because of critical PHP vulnerabilities.Yle News: “Finland temporarily shuts down government websites as a precaution for critical vulnerabilities”
SupportedThe measure affected multiple public services.Yle News: “Some of Yle's individual web services were experiencing outages on Wednesday. A number of other websites in Finland were taken down”
SupportedA fix was expected to become available by 5pm Finnish time on Wednesday.Yle News: “A fix addressing the vulnerabilities is expected to become available at 5pm Finnish time, according to the developers.”
SupportedTwo critical vulnerabilities were found in PHP software.Yle News: “Traficom's Cyber Security Centre published a statement earlier on Wednesday stating that two critical vulnerabilities had been found in the PHP software”
Partly supportedValtori announced that Finland's public internet services were taken offline.Yle News: “Finland's public internet web services were being taken offline on Wednesday as a precautionary move against a critical security vulnerability, according to the Government ICT Centre (Valtori)”
SupportedThe shutdowns began in the early afternoon, shortly after 1pm.Yle News: “According to Valtori, services began being shut down in the early afternoon. Valtori's director general Hannu Naumanen told Finnish news service STT shortly after 1pm on Wednesday that the shutdown of services had begun.”
SupportedEU cybersecurity officials warned organisations unable to apply patches to take affected webpages offline.Yle News: “EU cybersecurity officials have warned that organisations unable to apply the fixes should take their affected webpages offline, according to Reuters.”
Partly supportedThe vulnerabilities had not yet been actively exploited, but could be, according to Traficom's Cyber Security Centre.Yle News: “As of early Wednesday afternoon, there was no indication the vulnerabilities were being actively exploited, but the situation could change quickly.”
SupportedThe National Land Survey, Helsinki Book Fair and Finnish Film Foundation websites were among those affected, and some Yle services also had outages.Yle News: “Some of Yle's individual web services were experiencing outages on Wednesday. A number of other websites in Finland were taken down, including the site of the Helsinki Book Fair, which is starting on Thursday. The Finnish Film Foundation (SES) has also announced that its website has been closed.”
SupportedNaumanen did not specify which other web services would be affected.Yle News: “Naumanen did not specify which web services would be affected by the shutdowns.”
Partly supportedPHP is a widely used scripting language that powers many government sites.Yle News: “The shutdowns are due to vulnerabilities discovered in the widely used PHP software, which acts as the primary back-end backbone of the web.”