{"id":40908,"date":"2026-10-21T16:15:03","date_gmt":"2026-10-21T13:15:03","guid":{"rendered":"https:\/\/kibrisayna.com\/index.php\/2026\/10\/21\/internetin-gorunmez-omurgasinda-acik-milyonlarca-siteyi-ilgilendiriyor\/"},"modified":"2026-10-21T16:15:03","modified_gmt":"2026-10-21T13:15:03","slug":"internetin-gorunmez-omurgasinda-acik-milyonlarca-siteyi-ilgilendiriyor","status":"publish","type":"post","link":"https:\/\/kibrisayna.com\/index.php\/2026\/10\/21\/internetin-gorunmez-omurgasinda-acik-milyonlarca-siteyi-ilgilendiriyor\/","title":{"rendered":"\u0130nternetin g\u00f6r\u00fcnmez omurgas\u0131nda a\u00e7\u0131k. Milyonlarca siteyi ilgilendiriyor"},"content":{"rendered":"


\n
\"\u0130nternetin<\/p>\n

\u0130nternet sitelerinin temelini olu\u015fturan PHP programlama dilinde 9,2 ciddiyet puan\u0131na sahip iki kritik g\u00fcvenlik a\u00e7\u0131\u011f\u0131 tespit edildi.<\/p>\n

\u0130nternet sitelerinin \u00f6nemli bir b\u00f6l\u00fcm\u00fcn\u00fcn altyap\u0131s\u0131n\u0131 olu\u015fturan PHP yaz\u0131l\u0131m\u0131nda iki kritik g\u00fcvenlik a\u00e7\u0131\u011f\u0131<\/a> tespit edildi.<\/p>\n

 <\/p>\n

Avrupa Birli\u011fi’nin (AB) siber g\u00fcvenlik yetkilileri, sistemlerini h\u0131zla g\u00fcncelleyemeyen kurumlara sitelerini ge\u00e7ici olarak internete kapatma \u00e7a\u011fr\u0131s\u0131 yapt\u0131.<\/p>\n

 <\/p>\n

K\u00fcresel \u00f6l\u00e7ekte yayg\u0131n kullan\u0131lan programlama dili PHP’nin geli\u015ftirici ekibi, g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 kapatacak yamalar\u0131n bug\u00fcn T\u00fcrkiye saatiyle 17.00’de yay\u0131mlanaca\u011f\u0131n\u0131 duyurdu.<\/p>\n

 <\/p>\n

A\u00e7\u0131klar\u0131n, 10 \u00fczerinden de\u011ferlendirilen CVSS v4.0 ciddiyet \u00f6l\u00e7e\u011finde 9,2 puan ald\u0131\u011f\u0131 a\u00e7\u0131kland\u0131.<\/p>\n

 <\/p>\n

Avrupa Birli\u011fi Bilgisayar Acil Durum M\u00fcdahale Ekibi (CERT-EU), 9,2 puanl\u0131k risk derecesinin, sald\u0131rganlar\u0131n herhangi bir sisteme giri\u015f yapmadan uzaktan zararl\u0131 kod \u00e7al\u0131\u015ft\u0131rabilece\u011fini g\u00f6sterdi\u011fini bildirdi.<\/p>\n

 <\/p>\n

CERT-EU, yamalar\u0131 derhal uygulayamayacak kurulu\u015flar\u0131n ilgili siteleri \u00e7evrimd\u0131\u015f\u0131 b\u0131rakmay\u0131 de\u011ferlendirmesi gerekti\u011fini belirtti.<\/p>\n

 <\/p>\n

Alan ad\u0131 ve bar\u0131nd\u0131rma hizmeti sunan GoDaddy de s\u00f6z konusu a\u00e7\u0131klar\u0131n, sald\u0131rganlar\u0131n sunucularda internet \u00fczerinden i\u015flem yapmas\u0131na zemin haz\u0131rlayabilece\u011fini aktard\u0131.<\/p>\n

 <\/p>\n

\u015eirket, bu durumun veri h\u0131rs\u0131zl\u0131\u011f\u0131na, sitelerin tahrif edilmesine veya t\u00fcm sistemin ele ge\u00e7irilmesine yol a\u00e7abilece\u011fi uyar\u0131s\u0131nda bulundu.<\/p>\n

M\u0130LYONLARCA S\u0130TE AYNI ALTYAPIYI PAYLA\u015eIYOR<\/span><\/p>\n

Reuters ajans\u0131n\u0131n haberine g\u00f6re siber g\u00fcvenlik firmas\u0131 Huntress, payla\u015ft\u0131\u011f\u0131 de\u011ferlendirmede yaz\u0131l\u0131m\u0131n yayg\u0131nl\u0131\u011f\u0131na i\u015faret etti.<\/p>\n

 <\/p>\n

\u015eirket, “PHP her yerde. WordPress, Drupal, Joomla ve Magento sitelerine, payla\u015f\u0131ml\u0131 bar\u0131nd\u0131rma platformlar\u0131na, kontrol panellerine ve perde arkas\u0131nda PHP kulland\u0131\u011f\u0131n\u0131 belirtmeyen bir\u00e7ok yaz\u0131l\u0131ma sessizce g\u00fc\u00e7 veriyor” a\u00e7\u0131klamas\u0131n\u0131 yapt\u0131.<\/p>\n

 <\/p>\n

WordPress sitelerine g\u00fcvenlik sa\u011flayan Wordfence ise b\u00fct\u00fcn WordPress sitelerinin PHP kurulu sunucularda \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 hat\u0131rlatt\u0131.<\/p>\n

 <\/p>\n

Otomatik g\u00fcncellemelerin bu yamay\u0131 kapsamayaca\u011f\u0131n\u0131 kaydeden firma, site sahiplerine sunucular\u0131ndaki PHP yaz\u0131l\u0131m\u0131n\u0131 g\u00fcncellemekten kimin sorumlu oldu\u011funu \u00f6\u011frenmelerini tavsiye etti.<\/p>\n

S\u0130BER G\u00dcVENL\u0130K KURULU\u015eLARINDAN FARKLI DE\u011eERLEND\u0130RMELER<\/span><\/p>\n

\u0130nternet ve bulut g\u00fcvenli\u011fi <\/a>\u015firketi Cloudflare’in Teknolojiden Sorumlu Ba\u015fkan\u0131 (CTO) Dane Knecht, baz\u0131 ilk sald\u0131r\u0131lar\u0131n g\u00f6r\u00fclmeye ba\u015flad\u0131\u011f\u0131n\u0131 a\u00e7\u0131klad\u0131.<\/p>\n

 <\/p>\n

X \u00fczerinden a\u00e7\u0131klama yapan Knecht, g\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131 ge\u00e7ici \u00f6nlem olarak g\u00fcncellediklerini belirterek, “Bu yaln\u0131z ge\u00e7ici bir \u00e7\u00f6z\u00fcmd\u00fcr. PHP g\u00fcncellemeyi yay\u0131mlar yay\u0131mlamaz yaman\u0131z\u0131 yap\u0131n” dedi.<\/p>\n

 <\/p>\n

Avustralya Siber G\u00fcvenlik Merkezi (ACSC) ise kurumlar\u0131 sistemlerindeki PHP yap\u0131lar\u0131n\u0131 belirlemeye ve \u015f\u00fcpheli hareketleri izlemeye \u00e7a\u011f\u0131r\u0131rken, hen\u00fcz bu a\u00e7\u0131klar\u0131 hedef alan aktif bir sald\u0131r\u0131 tespit etmediklerini bildirdi.<\/p>\n

 <\/p>\n

CERT-EU ve ACSC, PHP 5 ve sonraki b\u00fct\u00fcn s\u00fcr\u00fcmlerin risk alt\u0131nda olabilece\u011fini payla\u015ft\u0131.<\/p>\n

 <\/p>\n

PHP g\u00fcvenlik ekibi ise etkilenen s\u00fcr\u00fcmler ile kapat\u0131lan g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131n teknik detaylar\u0131n\u0131n yamalarla e\u015f zamanl\u0131 duyurulaca\u011f\u0131n\u0131 bildirdi.<\/p>\n


\n
<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

\u0130nternet sitelerinin temelini olu\u015fturan PHP programlama dilinde 9,2 ciddiyet puan\u0131na sahip iki kritik g\u00fcvenlik a\u00e7\u0131\u011f\u0131 tespit edildi. \u0130nternet sitelerinin \u00f6nemli bir b\u00f6l\u00fcm\u00fcn\u00fcn altyap\u0131s\u0131n\u0131 olu\u015fturan PHP yaz\u0131l\u0131m\u0131nda iki kritik g\u00fcvenlik a\u00e7\u0131\u011f\u0131 tespit edildi.   Avrupa Birli\u011fi’nin (AB) siber g\u00fcvenlik yetkilileri, sistemlerini h\u0131zla g\u00fcncelleyemeyen kurumlara sitelerini ge\u00e7ici olarak internete kapatma \u00e7a\u011fr\u0131s\u0131 yapt\u0131.   K\u00fcresel \u00f6l\u00e7ekte yayg\u0131n kullan\u0131lan […]<\/p>\n","protected":false},"author":908,"featured_media":40909,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"advanced_seo_description":"","jetpack_seo_html_title":"","jetpack_seo_noindex":false,"jetpack_seo_schema_type":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[12],"tags":[],"class_list":["post-40908","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-teknoloji"],"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"https:\/\/kibrisayna.com\/wp-content\/uploads\/2026\/10\/NYSXGJEXYNJM7JYNFHKMJCJPCY-237293.jpg","_links":{"self":[{"href":"https:\/\/kibrisayna.com\/index.php\/wp-json\/wp\/v2\/posts\/40908","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kibrisayna.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kibrisayna.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kibrisayna.com\/index.php\/wp-json\/wp\/v2\/users\/908"}],"replies":[{"embeddable":true,"href":"https:\/\/kibrisayna.com\/index.php\/wp-json\/wp\/v2\/comments?post=40908"}],"version-history":[{"count":0,"href":"https:\/\/kibrisayna.com\/index.php\/wp-json\/wp\/v2\/posts\/40908\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kibrisayna.com\/index.php\/wp-json\/wp\/v2\/media\/40909"}],"wp:attachment":[{"href":"https:\/\/kibrisayna.com\/index.php\/wp-json\/wp\/v2\/media?parent=40908"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kibrisayna.com\/index.php\/wp-json\/wp\/v2\/categories?post=40908"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kibrisayna.com\/index.php\/wp-json\/wp\/v2\/tags?post=40908"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}