Explained: What are the two PHP vulnerabilities behind a global rush to update and why it matters
Researchers disclosed two critical PHP vulnerabilities dubbed 'php2shell' affecting PHP versions 5.4 through 8.5.11 that could allow remote code execution and complete system compromise. The flaws, affecting approximately 70% of internet infrastructure, prompted urgent advisories from India's CERT-In, CERT-EU and US CISA. Cloudflare reported exploitation attempts escalating from thousands to millions within hours of public disclosure, underscoring the severity and rapid-response nature of the threat.
Key points
- Two critical PHP vulnerabilities affect 70% of internet servers
- Attack attempts escalated to millions post-disclosure
- Indian CERT-In classified as high-risk with remote code execution capability
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. MediaNama did the reporting; read the original for the full story.
Read the full story at MediaNama
