Skip to content
Morocco
File

DGSSI PHP security alert reported in Morocco

This dossier follows October 2026 PHP alerts and fixes relevant to Moroccan digital services, distinguishing vulnerabilities from observed breaches.

Last updated : 1 key moments

Where things stand

As of 24 October 2026, PHP has released fixes and SNRT reports a 21 October DGSSI alert. No tally of Moroccan breaches is established here.

DGSSI PHP security alert reported in Morocco

SNRT reports a critical DGSSI alert issued on 21 October 2026 concerning two PHP vulnerabilities. The same day, the PHP project released fixes for risks of unauthenticated remote code execution.

Illustration representing PHP.
PHP illustration by Cvvaecc, 2024. Wikimedia Commons, CC BY 4.0. Does not depict an attack. — Cvvaecc / Wikimedia Commons — CC BY 4.0 https://creativecommons.org/licenses/by/4.0/ — illustration PHP de 2024, sans modification.

PHP lists fixed versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35 and urges affected users to update their installations.

The primary DGSSI page could not be retrieved; the Moroccan alert remains attributed to SNRT. These sources do not establish that specific Moroccan platforms were breached or that every outage resulted from an attack.

Sources 2