PHP2Shell Vulnerabilities Prompt Global Security Alerts

• •PHP2Shell vulnerabilities affect 70% of websites, allowing unauthenticated code execution.
• •Government agencies advised taking systems offline, with a patch released on October 21.
• •Exploitation attempts began before the patch was available, highlighting the urgency for updates.

Two critical vulnerabilities in PHP, known as PHP2Shell, were disclosed on October 20, 2026, affecting approximately 70% of websites. The flaws, which allow unauthenticated attackers to execute code on vulnerable servers, had been present in PHP's codebase for over two decades. Following the discovery, government agencies like Finland's took websites offline, and the NSA advised organizations to secure their systems. A patch was released on October 21, but exploitation attempts were already underway. AI-assisted research helped uncover these vulnerabilities, highlighting the increasing role of AI in cybersecurity. Despite the urgency, only a small fraction of affected systems were updated shortly after the disclosure. The situation underscores the difficulty defenders face in keeping up with rapidly discovered vulnerabilities and the potential for if patches are not applied quickly.