The Democratic Republic of the Congo has issued a cybersecurity warning after two critical vulnerabilities were reported in PHP, a programming language used to power websites and digital platforms.

In a notice reported by the Congolese Press Agency (ACP) on October 22, the Ministry of the Digital Economy identified the vulnerabilities as CVE-2026-109618 and CVE-2026-109619, warning that affected systems could face risks involving server security and hosted data.

The ministry has urged public administrations, website operators and technology service providers to check their PHP versions, install the relevant official security updates and patches, and strengthen server monitoring. Operators have also been advised to report suspicious activity to the appropriate authorities.

The alert highlights the growing importance of cybersecurity as government services, businesses and public-facing platforms increasingly rely on digital infrastructure.

For website owners and developers in the DRC, the immediate priority is to determine whether their systems are affected and apply the appropriate fixes. Keeping software updated and monitoring servers can help reduce exposure to known security threats.

The ministry says measures are being taken to strengthen the security, resilience and continuity of digital services across the country.