Security
PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert
The Hacker News·October 21, 2026·1 min read
PHP will release an out-of-cycle security update at 14:00 UTC today for two critical remote code execution vulnerabilities rated 9.2 on the CVSS v4.0 scale. The flaws affect supported branches 8.2 through 8.5. Researchers at watchTowr identified the issues, but no exploitation has been reported yet.
Read at The Hacker NewsDaily crypto arcade
Read the news, then play it.
Chainshorts turns crypto headlines into a daily game. Catch up in 60 words, then jump into daily lucky draws for a shot at the pot.