{"id":"thehackernews-02b6efa63436","seq":2903,"kind":"news","title":"PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge","url":"https://thehackernews.com/2026/10/php-issues-emergency-patches-for-two.html","permalink":"https://vulnpulse.app/items/thehackernews-02b6efa63436","summary":"PHP has released emergency updates that fix two critical flaws in the language itself, letting an attacker without an account run code on a web server. The fixes are in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, and the PHP team says only updating fully protects a server. The flaws, together called PHP2Shell, sit in the PHP runtime, not in any application, so a site is exposed even when its own","severity":"critical","techs":["php"],"cves":[],"tags":["security"],"source":{"id":"thehackernews","name":"The Hacker News"},"published_at":"2026-10-21T14:00:00.000Z","fetched_at":"2026-10-21T16:17:48.024Z"}