Search results for PHP2Shell
AI & Enterprise
Cyber alert raised to caution over PHP security flaws; government launches emergency response
South Korea raised its cyber crisis alert to “caution” as security vulnerabilities in the widely used programming language PHP spread. The Ministry of Science and ICT urged companies and institutions running PHP-based websites to apply security updates. PHP developers released fixes for two “PHP2Shell” flaws that allow attackers to execute commands on servers without authentication. The government and the Korea Internet & Security Agency issued urgent notices to firms and operators of key facilities and will bolster monitoring and response.
AI & Enterprise
Major PHP flaws trigger cybersecurity alerts, websites blocked across Europe
Two major security vulnerabilities have been found in PHP, prompting cybersecurity alerts in multiple countries. In Europe, some government agencies, hospitals and schools have shut websites to avoid hacking. Groups overseeing PHP confirmed the flaws, and bodies including KISA, CISA, the UK NCSC and the EU’s CERT-EU urged updates and warned of risk. The affected versions include several PHP 8.x releases and all unsupported versions below PHP 8.1.
AI & Enterprise
Theori releases analysis and emergency response steps for PHP2Shell flaws
AI-based offensive cybersecurity company Theori said on Oct. 22 it reproduced and verified the recently disclosed PHP engine vulnerabilities PHP2Shell (CVE-2026-109618 and CVE-2026-109619) and released an emergency response guide for companies and institutions. The bugs allow unauthenticated remote code execution or memory reading. The company said the flaws score 9.2 on CVSS v4.0. Affected versions include multiple PHP 8.x releases and all unsupported versions.
