CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution

CISA confirmed active exploitation of two PHP2Shell flaws, adding them to its Known Exploited Vulnerabilities catalog. Both rated 9.2 on the CVSS scale, they enable unauthenticated remote code execution. The agency's move signals urgent patching for affected deployments, as attackers are actively targeting these vulnerabilities.