On October 21, 2026, the Société des alcools du Québec, the Société de transport de Montréal and the Société de l'assurance automobile du Québec locked their public websites after identifying two flaws in the PHP programming protocol.
The vulnerabilities, which impact PHP‑based applications worldwide, prompted the agencies to temporarily disable their sites as a precaution.