NID services suspended amid cybersecurity concerns
Officials of the EC's NID wing confirmed the service interruption on Wednesday (October 28), saying technical teams were working to restore access
Daily Sun Report, Dhaka
Published: 28 Oct 2026, 02:46 PM
The Election Commission (EC) has temporarily suspended online National Identity Card (NID) services amid heightened cybersecurity concerns following the discovery of critical vulnerabilities in PHP, a programming language widely used to run websites.
Officials of the EC's NID wing confirmed the service interruption on Wednesday (October 28), saying technical teams were working to restore access.
Muhammad Ashraf Hossain, system manager of the NID wing, said the technical team was working on the issue and services would resume once the necessary work was completed.
The interruption comes as cybersecurity agencies worldwide have warned of serious vulnerabilities in PHP that could allow attackers to gain unauthorised access to affected web servers.
Bangladesh's government cyber-response agency, BGD e-GOV CIRT, issued an advisory on October 22 identifying two critical vulnerabilities, collectively known as PHP2Shell.
The flaws could allow attackers to execute malicious code remotely on vulnerable servers, potentially exposing sensitive information and disrupting online services.
In a follow-up warning on October 25, the agency said several government, public-sector and private organisations in Bangladesh were still operating outdated or potentially vulnerable versions of PHP.
It urged organisations to install security updates immediately and, where necessary, restrict public access to vulnerable systems.
The vulnerabilities have already prompted precautionary shutdowns of websites and online services in several countries.

