Skip to content
Critical PHP2Shell Vulnerabilities Threaten 70% of Websites

Critical PHP2Shell Vulnerabilities Threaten 70% of Websites

First seen 30 Oct 2026, 23:43 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 31, 2026 at 01:13 UTC
  • •PHP2Shell vulnerabilities allow remote code execution on affected servers.
  • •CISA has confirmed exploitation attempts against the vulnerabilities.
  • •Website administrators are urged to apply security updates released on October 21, 2026.

Two critical vulnerabilities, collectively known as PHP2Shell, have been discovered in PHP, a programming language that powers approximately 70% of the world's websites. These flaws allow unauthenticated attackers to execute malicious code remotely on affected servers, posing a severe risk to sensitive information and online services. The vulnerabilities received a CVSS score of 9.2, indicating a critical security risk. PHP developers released security updates on October 21, 2026, urging website administrators to apply these patches immediately. Reports indicate that exploitation attempts have already been observed, including activity against honeypot systems prior to the public disclosure of the vulnerabilities. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added these vulnerabilities to its Known Exploited Vulnerabilities Catalog. The use of artificial intelligence played a significant role in identifying these flaws, raising concerns about AI's potential to both discover and exploit vulnerabilities.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-21
Security updates released for PHP
PHP developers released critical security updates addressing the PHP2Shell vulnerabilities, urging immediate application by administrators.
Fox56
2026-10-26
CISA adds vulnerabilities to KEV catalog
The U.S. Cybersecurity and Infrastructure Security Agency included the PHP2Shell vulnerabilities in its Known Exploited Vulnerabilities Catalog.
Fox56
2026-10-27
Exploitation attempts reported
Researchers documented exploitation attempts against honeypot systems, indicating active targeting of the PHP2Shell vulnerabilities.
Aljazeera

More articles in this cluster (2)

Extracted Entities (6)

1 / 2

Common questions

What are the PHP2Shell vulnerabilities?
The PHP2Shell vulnerabilities are two critical flaws in PHP that allow remote code execution by unauthenticated attackers.
How urgent is the response to these vulnerabilities?
The vulnerabilities are classified as critical, with exploitation attempts already reported, making immediate patching essential.
What should website administrators do?
Administrators should identify affected PHP installations and apply the security updates released on October 21, 2026, without delay.