[yasinmiran]

What changed

Added one new news article:

• Slug: src/content/news/2026/critical-php-vulnerabilities-affect-elixir-norway-services/index.mdx
• Title: Critical PHP vulnerabilities affect ELIXIR Norway services
• Date: Oct 23, 2026 (today)
• Tags: infrastructure, services (both already in use on other news articles)

Content

The article covers the two critical PHP vulnerabilities disclosed on 21 October 2026, based on the Shifter reference article supplied with the request. It includes the background the requester provided (PHP behind WordPress and Drupal, ~70 percent of the world's websites, the Norwegian Directorate for Digitalisation, OsloMet and Feide taking services down), notes that some ELIXIR Norway services will be affected while security updates are applied, and directs users to support@elixir.no if they cannot reach a service. It also summarises supporting facts from the reference (NSM warning, arbitrary code execution risk, vulnerabilities present for over ten years and found with AI assistance, patches released Wednesday afternoon, PHP 8.1 or older particularly exposed, active exploitation attempts). The Shifter article is linked as the source.

Assumptions

• No image was attached, so the article has no cover image (covers are optional for news).
• The reference article is in Norwegian; the article is written in English to match the rest of the site, and the source link is labelled "(in Norwegian)".
• The support contact is support@elixir.no (the technical support mailbox), which is the appropriate contact for users who cannot reach a service.
• Publication date set to today, Oct 23, 2026; the NSM warning and takedowns are described as happening on Wednesday 21 October, per the reference article.
• No specific ELIXIR Norway services were named as affected, since the request did not say which ones; the article says "some of our services will be affected" and invites users to report problems to support.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

An organization owner can choose the repository organization as the billing source for reviews requested by members with a paid Copilot license. Learn about Copilot code review billing.