PHP2Shell: AI-Found PHP Flaws Put Millions of Sites at Risk

PHP2Shell: AI-Found PHP Flaws Put Millions of Sites at Risk

PHP2Shell is a pair of critical PHP runtime flaws that AI-assisted researchers turned into working exploits after the bug sat unresolved since 2024. Patches cover PHP 8.2 and newer, while about 48% of PHP sites with a known version run older branches.

PHP2Shell vulnerabilities put millions of sites at risk.

Top stories.PHP2Shell vulnerabilities put millions of sites at risk.Indian certificate authority exposes private keys.Threat actors compromise LiteLLM.Quest Diagnostics discloses a breach.GitLab patches a maximum-severity vulnerability.PHP2Shell vulnerabilities put millions of sites at risk.PHP received patches for two critical vulnerabilities Wednesday morning, and all PHP users are urged to update immediately. The flaws, which researchers are …

PHP2Shell: Who Is At Risk And How Can Businesses Stay Safe?

PHP2Shell puts vulnerable servers at risk of cyberattacks. Find out which businesses are exposed, how to secure affected PHP systems, and why patching alone may not prevent breaches.

PHP2Shell Flaws Put Millions Of Web Services At Risk

Two critical PHP vulnerabilities could expose web servers to cyberattacks. Known collectively as PHP2Shell, the flaws may allow unauthenticated attackers to execute code on affected systems, potentially exposing sensitive data and disrupting business services. A Censys snapshot dated October 22, 2026, identified around 36.7 million internet-facing services reporting potentially affected PHP versions. The figure counts […] The post PHP2Shell Flaw…