Tag: php2shell
2 articles
PHP Rushes Emergency Patches for High-Severity Vulnerabilities
The PHP project has rushed out an emergency release to fix two critical remote-code-execution flaws, with early attacks already emerging, prompting an urgent call to update to patched versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35. This swift action aims to prevent exploitation of the vulnerabilities, dubbed "php2shell," which have been rated 9.2 on the CVSS v4.0 scale.
PHP Security Team Releases Emergency Patches for PHP2Shell Flaws
Critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, known as PHP2Shell, have been patched by the PHP security team to prevent unauthenticated remote code execution attacks. Immediate upgrades are urged across PHP-hosting infrastructure to safeguard against these flaws.