{"id":46031,"date":"2026-10-22T09:58:28","date_gmt":"2026-10-22T06:58:28","guid":{"rendered":"https:\/\/blog.markergroupe.com\/?p=46031"},"modified":"2026-10-22T10:03:20","modified_gmt":"2026-10-22T07:03:20","slug":"php-guvenlik-acigi-ve-sunucu-guvenligi-icin-alinmasi-gereken-onlemler","status":"publish","type":"post","link":"https:\/\/blog.markergroupe.com\/tr\/php-guvenlik-acigi-ve-sunucu-guvenligi-icin-alinmasi-gereken-onlemler\/","title":{"rendered":"PHP G\u00fcvenlik A\u00e7\u0131\u011f\u0131 ve Sunucu G\u00fcvenli\u011fi \u0130\u00e7in Al\u0131nmas\u0131 Gereken \u00d6nlemler\u00a0"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_88 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">\u0130\u00e7indekiler<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"\u0130\u00e7indekiler Tablosunu A\u00e7\/Kapat\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/blog.markergroupe.com\/tr\/php-guvenlik-acigi-ve-sunucu-guvenligi-icin-alinmasi-gereken-onlemler\/#PHP_Guvenlik_Aciklari_Neden_Onemli\" >PHP G\u00fcvenlik A\u00e7\u0131klar\u0131 Neden \u00d6nemli?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/blog.markergroupe.com\/tr\/php-guvenlik-acigi-ve-sunucu-guvenligi-icin-alinmasi-gereken-onlemler\/#Hangi_PHP_Surumleri_Etkileniyor\" >Hangi PHP S\u00fcr\u00fcmleri Etkileniyor?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/blog.markergroupe.com\/tr\/php-guvenlik-acigi-ve-sunucu-guvenligi-icin-alinmasi-gereken-onlemler\/#Sunucular_Bu_Aciklara_Karsi_Nasil_Korunmali\" >Sunucular Bu A\u00e7\u0131klara Kar\u015f\u0131 Nas\u0131l Korunmal\u0131?<\/a><\/li><\/ul><\/nav><\/div>\n\n<p class=\"wp-block-paragraph\">Web sitelerinin altyap\u0131s\u0131nda yayg\u0131n olarak kullan\u0131lan PHP, kritik g\u00fcvenlik a\u00e7\u0131klar\u0131 nedeniyle siber sald\u0131r\u0131lar\u0131n hedefi olabiliyor. Ekim 2026&#8217;da duyurulan iki kritik g\u00fcvenlik a\u00e7\u0131\u011f\u0131, belirli PHP s\u00fcr\u00fcmlerini kullanan sunucularda uzaktan kod \u00e7al\u0131\u015ft\u0131r\u0131lmas\u0131na ve sistemlerin sald\u0131rganlar taraf\u0131ndan ele ge\u00e7irilmesine yol a\u00e7abilecek riskler ta\u015f\u0131yor.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>CVE-2026-109618 ve CVE-2026-109619<\/strong> kodlar\u0131yla takip edilen bu a\u00e7\u0131klar, sald\u0131rganlar\u0131n \u00f6zel olarak haz\u0131rlanm\u0131\u015f istekler arac\u0131l\u0131\u011f\u0131yla PHP \u00e7al\u0131\u015fma ortam\u0131ndaki bellek y\u00f6netimi hatalar\u0131ndan yararlanabilmesiyle ili\u015fkili. PHP ekibi, 21 Ekim 2026&#8217;da etkilenen ve desteklenen s\u00fcr\u00fcmler i\u00e7in g\u00fcvenlik g\u00fcncellemeleri yay\u0131mlad\u0131.<\/p>\n\n\n\n<h2 id=\"php-guvenlik-aciklari-neden-onemli\" class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"PHP_Guvenlik_Aciklari_Neden_Onemli\"><\/span><strong>PHP G\u00fcvenlik A\u00e7\u0131klar\u0131 Neden \u00d6nemli?<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Uzaktan kod \u00e7al\u0131\u015ft\u0131rma (Remote Code Execution \u2013 RCE), sald\u0131rganlar\u0131n bir sisteme fiziksel eri\u015fim sa\u011flamadan veya baz\u0131 senaryolarda kimlik do\u011frulamas\u0131 yapmadan komut \u00e7al\u0131\u015ft\u0131rabilmesine imk\u00e2n tan\u0131yan kritik bir g\u00fcvenlik problemidir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Bu t\u00fcr bir a\u00e7\u0131k k\u00f6t\u00fcye kullan\u0131ld\u0131\u011f\u0131nda sunucudaki dosyalar, uygulama verileri ve sistem kaynaklar\u0131 risk alt\u0131na girebilir. Etkinin boyutu sunucu yap\u0131land\u0131rmas\u0131na, kullan\u0131lan PHP s\u00fcr\u00fcm\u00fcne ve mevcut g\u00fcvenlik \u00f6nlemlerine g\u00f6re de\u011fi\u015febilir.<\/p>\n\n\n\n<h2 id=\"hangi-php-surumleri-etkileniyor\" class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Hangi_PHP_Surumleri_Etkileniyor\"><\/span><strong>Hangi PHP S\u00fcr\u00fcmleri Etkileniyor?<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Resm\u00ee duyuruya g\u00f6re PHP 5.4&#8217;ten 8.5.11&#8217;e kadar uzanan s\u00fcr\u00fcmler bu g\u00fcvenlik a\u00e7\u0131klar\u0131ndan etkileniyor. Desteklenen s\u00fcr\u00fcmler i\u00e7in yay\u0131mlanan d\u00fczeltmeler \u015funlar\u0131 i\u00e7eriyor:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>PHP 8.5.12<\/li>\n\n\n\n<li>PHP 8.4.27<\/li>\n\n\n\n<li>PHP 8.3.36<\/li>\n\n\n\n<li>PHP 8.2.35<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">PHP 8.1 ve daha eski s\u00fcr\u00fcmler art\u0131k PHP projesinden d\u00fczenli g\u00fcvenlik g\u00fcncellemesi alm\u0131yor. Bu s\u00fcr\u00fcmleri kullanan sistemlerde g\u00fcncel yamalara eri\u015fim i\u00e7in da\u011f\u0131t\u0131m sa\u011flay\u0131c\u0131s\u0131n\u0131n veya bar\u0131nd\u0131rma hizmetinin sundu\u011fu se\u00e7enekler kontrol edilmeli; m\u00fcmk\u00fcn oldu\u011funda desteklenen bir PHP s\u00fcr\u00fcm\u00fcne ge\u00e7i\u015f planlanmal\u0131d\u0131r.&nbsp;<\/p>\n\n\n\n<div class=\"wp-block-greenshift-blocks-image gspb_image gspb_image-id-gsbp-46f2861\" id=\"gspb_image-id-gsbp-46f2861\"><img decoding=\"async\" src=\"https:\/\/blog.markergroupe.com\/wp-content\/uploads\/2026\/10\/PHP-Guvenlik-Acigi-ve-Sunucu-Guvenligi-Icin-Alinmasi-Gereken-Onlemler.webp\" data-src=\"\" alt=\"\" loading=\"lazy\" width=\"1672\" height=\"941\" title=\"\"><\/div>\n\n\n\n<h2 id=\"sunucular-bu-aciklara-karsi-nasil-korunmali\" class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Sunucular_Bu_Aciklara_Karsi_Nasil_Korunmali\"><\/span><strong>Sunucular Bu A\u00e7\u0131klara Kar\u015f\u0131 Nas\u0131l Korunmal\u0131?<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">G\u00fcvenlik riskini azaltmak i\u00e7in \u00f6ncelikle sunucularda kullan\u0131lan PHP s\u00fcr\u00fcmleri belirlenmeli ve ilgili g\u00fcvenlik g\u00fcncellemeleri uygulanmal\u0131d\u0131r. G\u00fcncelleme sonras\u0131nda PHP s\u00fcre\u00e7lerinin yeniden ba\u015flat\u0131lmas\u0131 ve d\u00fczeltmenin etkin oldu\u011funun do\u011frulanmas\u0131 da \u00f6nemlidir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">G\u00fcncellemenin hemen yap\u0131lamad\u0131\u011f\u0131 durumlarda PHP ekibinin \u00f6nerdi\u011fi ge\u00e7ici yap\u0131land\u0131rma \u00f6nlemleri belirli sald\u0131r\u0131 yollar\u0131n\u0131 s\u0131n\u0131rland\u0131rabilir. Ancak bu \u00f6nlemler tam koruma sa\u011flamaz ve g\u00fcvenlik g\u00fcncellemesinin yerini tutmaz.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Buna ek olarak sunucu g\u00fcnl\u00fckleri incelenmeli, beklenmeyen i\u015flem hareketleri takip edilmeli ve ola\u011fan d\u0131\u015f\u0131 dosya de\u011fi\u015fiklikleri kontrol edilmelidir. Sald\u0131r\u0131 ger\u00e7ekle\u015fmi\u015f olabilece\u011fine dair i\u015faretler varsa yaln\u0131zca yaz\u0131l\u0131m\u0131 g\u00fcncellemek yeterli olmayabilir; sistemin ayr\u0131ca g\u00fcvenlik incelemesinden ge\u00e7irilmesi gerekir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">PHP&#8217;de tespit edilen kritik g\u00fcvenlik a\u00e7\u0131klar\u0131, web sitelerinin ve sunucu altyap\u0131lar\u0131n\u0131n g\u00fcncel tutulmas\u0131n\u0131n \u00f6nemini bir kez daha ortaya koyuyor. G\u00fcvenlik yamalar\u0131n\u0131n zaman\u0131nda uygulanmas\u0131, eski yaz\u0131l\u0131m s\u00fcr\u00fcmlerinin yenilenmesi ve sunucu kay\u0131tlar\u0131n\u0131n d\u00fczenli olarak incelenmesi, olas\u0131 sald\u0131r\u0131lar\u0131n etkisini azaltmaya yard\u0131mc\u0131 olur.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Web sitesi g\u00fcvenli\u011fi yaln\u0131zca uygulama koduyla s\u0131n\u0131rl\u0131 de\u011fildir. PHP s\u00fcr\u00fcm\u00fc, sunucu yap\u0131land\u0131rmas\u0131 ve altyap\u0131 y\u00f6netimi birlikte ele al\u0131nmal\u0131; kritik g\u00fcvenlik duyurular\u0131 do\u011frultusunda gerekli \u00f6nlemler gecikmeden uygulanmal\u0131d\u0131r.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Hizmetlerimiz hakk\u0131nda detayl\u0131 bilgi almak i\u00e7in&nbsp;<a href=\"https:\/\/www.markergroupe.com\/tr\/iletisim\"><em>MarkerGroupe.com<\/em><\/a><em>&nbsp;<\/em>&nbsp;web sitesini ziyaret edebilir veya&nbsp;<em>&nbsp;<\/em><a href=\"mailto:hello@markergroupe.com\"><em>hello@markergroupe.com<\/em><\/a> adresinden bizimle ileti\u015fime ge\u00e7ebilirsiniz.<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Web sitelerinin altyap\u0131s\u0131nda yayg\u0131n olarak kullan\u0131lan PHP, kritik g\u00fcvenlik a\u00e7\u0131klar\u0131 nedeniyle siber sald\u0131r\u0131lar\u0131n hedefi olabiliyor. Ekim 2026&#8217;da duyurulan iki kritik g\u00fcvenlik a\u00e7\u0131\u011f\u0131, belirli PHP s\u00fcr\u00fcmlerini kullanan sunucularda uzaktan kod \u00e7al\u0131\u015ft\u0131r\u0131lmas\u0131na ve sistemlerin sald\u0131rganlar taraf\u0131ndan ele ge\u00e7irilmesine yol a\u00e7abilecek riskler ta\u015f\u0131yor. CVE-2026-109618 ve CVE-2026-109619 kodlar\u0131yla takip edilen bu a\u00e7\u0131klar, sald\u0131rganlar\u0131n \u00f6zel olarak haz\u0131rlanm\u0131\u015f istekler arac\u0131l\u0131\u011f\u0131yla PHP [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":46032,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_gspb_post_css":"#gspb_image-id-gsbp-46f2861 img{vertical-align:top;display:inline-block;box-sizing:border-box;max-width:100%;height:auto}","footnotes":""},"categories":[1487,1477],"tags":[2675],"class_list":["post-46031","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-haberler","category-yazilim","tag-php"],"blocksy_meta":{"styles_descriptor":{"styles":{"desktop":"","tablet":"","mobile":""},"google_fonts":[],"version":7}},"_links":{"self":[{"href":"https:\/\/blog.markergroupe.com\/tr\/wp-json\/wp\/v2\/posts\/46031","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.markergroupe.com\/tr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.markergroupe.com\/tr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.markergroupe.com\/tr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.markergroupe.com\/tr\/wp-json\/wp\/v2\/comments?post=46031"}],"version-history":[{"count":2,"href":"https:\/\/blog.markergroupe.com\/tr\/wp-json\/wp\/v2\/posts\/46031\/revisions"}],"predecessor-version":[{"id":46035,"href":"https:\/\/blog.markergroupe.com\/tr\/wp-json\/wp\/v2\/posts\/46031\/revisions\/46035"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.markergroupe.com\/tr\/wp-json\/wp\/v2\/media\/46032"}],"wp:attachment":[{"href":"https:\/\/blog.markergroupe.com\/tr\/wp-json\/wp\/v2\/media?parent=46031"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.markergroupe.com\/tr\/wp-json\/wp\/v2\/categories?post=46031"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.markergroupe.com\/tr\/wp-json\/wp\/v2\/tags?post=46031"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}