Nasty bug with very simple exploit hits PHP just in time for the weekend:
With PoC code available and active Internet scans, speed is of the essence.
arstechnica.com/security/2024/06/php-vulnerability-allows-attackers-to-run-malicious-code-on-windows-servers/
Story Details
| Last Updated | |
| Total Articles | 2 |
Main Topics
Interface which offers a standard protocol for web servers to execute programs install
News on this topic
PHP fixes critical RCE flaw impacting all versions for Windows: A new PHP for Windows remote code execution (RCE) vulnerability has been disclosed ...
bleepingcomputer.com/news/security/php-fixes-critical-rce-flaw-impacting-all-versions-for-windows/
Similar to This
Previous
PHP2Shell security flaws now sucessfully exploited in the wild: Two critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as ...
bleepingcomputer.com/news/security/php2shell-security-flaws-now-sucessfully-exploited-in-the-wild/
dlvr.it Oct 23
There's a third PHP2Shell bug, but it won't get an emergency fix: Bad things (and software bugs?) come in threes
theregister.com/security/2026/10/23/theres-a-third-php2shell-bug-but-it-wont-get-an-emergency-fix/5305208
PHP shares mitigation for new RCE vulnerability with no patch: The PHP security team has shared mitigation measures for a new remote code execution vulnerability ...
bleepingcomputer.com/news/security/php-shares-mitigation-for-new-and-unpatched-rce-vulnerability/
PHP2Shell: Haven't patched yet? Take these steps now to mitigate - ZDNET: The PHP Project provides instructions to stop further RCE exploits in limited ...
zdnet.com/tech/php2shell-php-patch-mitigation-critical-exploit/
The Man Who Saved the Internet Yestersday: Ondřej Surý was a relatively anonymous volunteer working on PHP security. Then the internet exploded.
theatlantic.com/technology/2026/10/man-who-saved-internet-php-vulnerability/689123/
Two critical PHP vulnerabilities threaten websites worldwide. Here’s why Russia, where the language powers more than 90% of sites ...
meduza.io/en/cards/two-critical-php-vulnerabilities-threaten-websites-worldwide-here-s-why-russia-where-the-language-powers-more-than-90-percent-of-sites-faces-particularly-high-risks
PHP ships emergency patches for critical PHP2Shell flaws: The PHP security team released emergency security patches for two critical remote code execution (RCE) ...
bleepingcomputer.com/news/security/php-ships-emergency-patches-for-critical-php2shell-flaws/
The New Stack Oct 22
PHP’s security scramble is just a preview: AI is digging up flaws faster than maintainers can fix them
thenewstack.io/php2shell-ai-vulnerabilities-maintainers/
What is PHP and why did it take government websites offline?: The developers of PHP said they would release patches for two critical vulnerabilities ...
reuters.com/technology/what-is-php-why-did-it-take-government-websites-offline-2026-10-21/
PHP rushed emergency patch after critical RCE flaws leaked online
neowin.net/news/php-rushed-emergency-patch-after-critical-rce-flaws-leaked-online/
Websites across world hit by millions of attempts to exploit PHP code flaw: Problem in PHP language that underpins 70% of websites has led governments and ...
theguardian.com/technology/2026/oct/22/websites-across-world-hit-by-millions-of-attempts-to-exploit-php-code-flaw
Critical vulnerabilities in commonly used web code spark rush to update systems: Crucial vulnerabilities in the PHP language is so severe that global authorities ...
nbcnews.com/tech/security/critical-vulnerabilities-php-update-systems-rcna604751
CBR Oct 18
Quentin Tarantino Confirms What's Holding Back 10th and Final Film After Finishing Script
cbr.com/quentin-tarantino-final-movie-delay-explained/
Ransomware attackers quickly weaponize PHP vulnerability with 9.8 severity rating
arstechnica.com/security/2024/06/thousands-of-servers-infected-with-ransomware-via-critical-php-vulnerability/
Next