22.10.2026 12:00
The Cybersecurity Presidency announced that preventive efforts regarding security vulnerabilities detected in the PHP infrastructure used worldwide are ongoing. The Presidency reported that security checks on the e-Government Gateway have been completed and services continue without interruption.
Two critical vulnerabilities have been identified in PHP software, which forms the backbone of millions of websites and enterprise applications worldwide, that could allow cybercriminals to infiltrate systems without needing a username or password. Following the risk referred to internationally as "PHP2Shell", a comprehensive national-scale security effort was launched under the coordination of the Cybersecurity Directorate of the Presidency of the Republic of Türkiye.
NO ISSUE FOUND THAT WOULD AFFECT E-GOVERNMENT
After the investigations, a statement was made regarding the status of the e-Government Gateway, one of the most curious issues. In detailed technical checks carried out on the platform, which has more than 69 million users, no problem was found that would adversely affect the security and continuity of public services.
It was stated that citizens continue to benefit from the services in a normal and uninterrupted manner, while attention was also drawn to the platform's operating architecture: the e-Government Gateway does not collect data in a single center, but instead operates by connecting to the relevant public institutions over real-time and secure protocols. In this way, with the multi-layered security architecture implemented and 24/7 active monitoring systems, potential risks are prevented at their source.
"UPDATE YOUR SYSTEMS"
The Cybersecurity Directorate issued an important warning to eliminate the risk not only on the public side but also across the private sector. Emphasizing that all institutions and organizations must urgently review their own PHP infrastructures, the Directorate reiterated the call to apply the official security patches published by the manufacturer without delay and to switch to secure versions.
In the statement, attention was drawn to the fact that especially outdated (old) software components left over from past periods are a primary target for cyber attackers, and it was noted that completing system checks without delay is of vital importance.
24/7 MONITORING CONTINUES
The Cybersecurity Directorate, working in full coordination with Cyber Incident Response Teams (SOME) for the early detection of potential risks, reported that nationwide network scans and technical monitoring processes are continuing without interruption.
It was stated that the technical security measures and detailed guides that institutions and organizations may need are included in the security notice published on the official website of the Cybersecurity Directorate.