Back to all news
Security

PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge

The Hacker News·October 21, 2026·1 min read
PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge

PHP released emergency patches for two critical remote code execution flaws, collectively called PHP2Shell, which allow unauthenticated attackers to run code on web servers. The fixes are in PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35. Exploit attempts have already emerged, and the PHP team urges immediate updates to protect servers.

Read at The Hacker News
Daily crypto arcade

Read the news, then play it.

Chainshorts turns crypto headlines into a daily game. Catch up in 60 words, then jump into daily lucky draws for a shot at the pot.

Open ChainshortsGet it on the Solana dApp Store