Massive Cybersecurity Flaw Forces French Government Websites Offline

On October 21, 2026, a critical cybersecurity vulnerability identified by the French National Cybersecurity Agency (Anssi) led to the temporary shutdown of numerous French government websites. Key affected sites include various prefectures, the Ministry of Economy, and Météo-France. The breach involves a widely used software component, specifically a vulnerable PHP protocol essential for dynamic web pages, used by over 600,000 servers across France. The PHP foundation acknowledged failures in their security processes and has initiated changes following the release of security patches on the same day.

This incident has sparked national and international concern, prompting officials in countries such as Japan and the Netherlands to urgently update their systems to prevent similar risks. The vulnerability has put France's cybersecurity readiness under scrutiny, with calls for immediate and improved protective measures.

Simultaneously, a large-scale technical outage struck Orange’s mobile network—including its subsidiary Sosh—disrupting service for millions. Despite the scale, Orange does not currently suspect a cyberattack but is investigating a technical fault causing the disruption. The outage has significantly affected calls, SMS, and internet connectivity, with nearly 12,000 reports made at its peak on Downdetector.

Authorities and service providers continue efforts to mitigate risks and restore normal operations, underscoring the challenges France faces amid growing cybersecurity threats and technical vulnerabilities.