Gira uruhare mu kurinda urubuga rw’ikoranabuhanga rw’U Rwanda

Ese ukunda iby’umutekano w’ibijyanye n’ikoranabuhanga kandi witeguye kwinjira ku isoko ry’umurimo rikeneye abahanga miliyoni 4.8? Tangirira aha urugendo rwawe rwerekeye iby’umutekano w’ibijyanye n’ikoranabuhanga.

Sura urubuga rwa interineti rwa CyberHub Gira ubumenyi ku mutekano w’ibijyanye n’ikoranabuhanga

Ibitwerekeyeho

Intego y'Ikigo cy'Igihugu Gishinzwe Umutekano mu by'Ikoranabuhanga (NCSA) ni ukubaka ubumenyi n'ubushobozi bukenewe kugira ngo ikoranabuhanga ry'u Rwanda rikomeze iterambere ry'ubukungu n'imibereho myiza. By'umwihariko, NCSA igenzura ibi bikurikira:

Kurinda ikoranabuhanga no guhangana n’ibitero

Kurinda ikoranabuhanga isaha ku yindi (24/7), gukurikirana ibyago bishobora kubaho no gusubiza ibitero by’ikoranabuhanga.

Gushyiraho amabwiriza n’ingamba z’umutekano w’ikoranabuhanga

Gushyiraho amabwiriza n’ingamba zerekeye umutekano w’ibijyanye n’ikoranabuhanga kugira ngo habeho ubushobozi bwo guhangana n’ibitero by’ikoranabuhanga.

Kurinda amakuru bwite n’imibereho bwite by’umuntu

Gushyira mu bikorwa Itegeko ryerekeye kurinda amakuru bwite n’imibereho bwite by’umuntu

Guhuriza hamwe ibikorwa by’umutekano w’ikoranabuhanga

Dukorana n’abafatanyabikorwa kugira ngo habeho urubuga rw’ikoranabuhanga rutekanye

Soma byinshi

Security Alert: Critical Remote Code Execution Vulnerabilities in PHP

21 Ukwakira 2026

PHP has released security updates addressing two critical remote code execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619. Both vulnerabilities are rated Critical, with a CVSS v4.0 score of 9.2. They could allow unauthenticated remote attackers to execute malicious code on affected servers.

Affected Systems

The following system versions are affected:

PHP 8.5: versions before 8.5.12
PHP 8.4: versions before 8.4.27
PHP 8.3: versions before 8.3.36
PHP 8.2: versions before 8.2.35
PHP 8.1 and earlier: These versions are also affected.

Security Risks

The identified critical vulnerabilities could allow attackers to execute malicious code on affected servers without authentication or access sensitive information, including passwords and other credentials. Successful exploitation could compromise affected servers, websites, and web applications.

Recommended Actions

The National Cyber Security Authority (NCSA) recommends users and system administrators to:

1. Update PHP to a fixed version as soon as possible to address the identified critical vulnerabilities and protect affected servers from potential exploitation.

The recommended software versions to upgrade to are as follows:

PHP 8.5: Upgrade to version 8.5.12 or above
PHP 8.4: Upgrade to version 8.4.27 or above
PHP 8.3: Upgrade to version 8.3.36 or above
PHP 8.2: Upgrade to version 8.2.35 or above
PHP 8.1 and earlier: Upgrade to a supported version or check with the relevant vendor for available security fixes.

2. Before performing any update tasks, ensure that you have a backup of your data.
For further information and support, please contact the National Cyber Security Authority (NCSA) by emailto rwcsirt@ncsa.gov.rw or call us on 9009
References