MDS Issue Security Updates for Government Web Systems

The Maldives Digital Service (MDS), in coordination with the National Cyber Security Agency (NCSA), has initiated emergency security patching and system hardening across government digital infrastructure following the discovery of critical vulnerabilities in PHP web technologies.

MDS stated that the proactive response targets CVE-2026-109618 and CVE-2026-109619, which pose unauthorised access risks to government systems. The flaws were initially detected using artificial intelligence, with cybersecurity firm “Wiz” noting it as one of the most severe security issues uncovered by AI technology to date.

advertisement

advertisement

In response, the PHP development team released urgent security updates across versions 8.2.35, 8.3.36, 8.4.27, and 8.5.12, with authorities strongly advising all affected systems to update immediately. Cybersecurity bodies have further urged institutions unable to apply immediate patches to temporarily take their websites offline.

MDS stated that technical teams are conducting continuous assessments to apply patches and enforce additional protective measures. While temporary service disruptions may occur across public digital platforms during the rollout, MDS assured that efforts are underway to minimise downtime and restore full service operations as quickly as possible.

Maldives Digital Service (MDS), in coordination with the National Cyber Security Agency (NCSA), is implementing necessary security patches, vulnerability mitigation measures, and system hardening activities in response to recently identified critical vulnerabilities affecting PHP web technologies, identified as CVE-2026-109618 and CVE-2026-109619. These proactive measures are being undertaken to address potential security risks, prevent unauthorized access, and strengthen the protection and resilience of government digital infrastructure and services. The PHP development team has released security updates in PHP 8.2.35, 8.3.36, 8.4.27 and 8.5.12 to address these vulnerabilities, and affected systems are strongly advised to be updated immediately. Temporary service disruptions may occur while these security measures are being implemented. MDS will work to minimize any impact and restore affected government digital services as quickly as possible. MDS, in close coordination with NCSA, remains committed to strengthening national cybersecurity readiness and ensuring the continued security, reliability, and resilience of government digital services. 🛡️ Strengthening Cybersecurity. Securing Government Digital Services. Official PHP Security Advisory 🔗 https://t.co/04bXhFxOjn #MaldivesDigitalService #MDS #NCSA #CyberSecurity #SecurityAdvisory #VulnerabilityMitigation #DigitalResilience— Maldives Digital Service (@mdsgovmv) October 21, 2026

📢 Cybersecurity Update Maldives Digital Service (MDS), in coordination with the National Cyber Security Agency (NCSA), continues to closely monitor the situation concerning the recently identified PHP security vulnerabilities. Mitigation measures have been implemented, and ongoing assessments are being carried out to identify potentially affected systems. Necessary security patches and additional protective measures are being applied wherever vulnerabilities are identified. MDS remains committed to strengthening the security and resilience of government digital infrastructure and ensuring the continued reliability of digital services. 🛡️ Strengthening Cybersecurity. Securing Government Digital Services. #MaldivesDigitalService #MDS #NCSA #CyberSecurity #SecurityAdvisory #VulnerabilityMitigation #DigitalResilience— Maldives Digital Service (@mdsgovmv) October 22, 2026