CRITICALVulnerability
Global

CISA confirms PHP2Shell vulnerabilities now exploited in attacks

·Source: BleepingComputer

Updated:

Executive Summary

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday. [...]

Analysis

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday. [...]
Source Attribution

Originally published by BleepingComputer on Oct 27, 2026.

Related Threats