CRITICALVulnerability
Global

Critical PHP Patches Address 'Very, Very Bad Vulnerability'

·Source: Bank Info Security

Updated:

Executive Summary

Immediate Updating Advised as Experts Warn Large-Scale Attacks Likely Imminent Security experts are warning all organizations to immediately apply new fixes for two critical "PHP2Shell" vulnerabilities in widely used

Analysis

Immediate Updating Advised as Experts Warn Large-Scale Attacks Likely Imminent Security experts are warning all organizations to immediately apply new fixes for two critical "PHP2Shell" vulnerabilities in widely used PHP that can be remotely exploited by unauthenticated attackers to run arbitrary code, take full control of the underlying server and steal data.

Indicators of Compromise (2)

URL (1)
https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/critical-php-patches-address-very-very-bad-vulnerability-image_small-2-a-33162.jpg
VirusTotalURLhaus
Domain (1)
ismg-cdn.nyc3.cdn.digitaloceanspaces.com
VirusTotalURLhaus
Source Attribution

Originally published by Bank Info Security on Oct 21, 2026.

Related Threats

CRITICALVulnerability

New Serious PHP Vulnerabilities Released and Patched

PHP maintainers have released two critical vulnerabilities: PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to update immediately. Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed. We consider the ris

Schneier on Security
MEDIUMVulnerability

Amazon says PHP2Shell exploitation began 4 days before patches

Security researchers at Amazon Threat Intelligence say attackers began targeting the PHP2Shell flaws four days before security patches were released on Wednesday. [...]

BleepingComputer
MEDIUMVulnerability

Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform

The Amsterdam-based company plans to use the funding for research and development and commercial expansion in Europe and the Middle East. The post Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform appeared first on SecurityWeek .

SecurityWeek