## PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge

- 種別: news
- 重大度: critical
- 関連技術: php
- 公開日時: 2026-10-21T14:00:00.000Z
- 情報源: The Hacker News (https://thehackernews.com/2026/10/php-issues-emergency-patches-for-two.html)
- パーマリンク: https://vulnpulse.app/items/thehackernews-02b6efa63436

PHP has released emergency updates that fix two critical flaws in the language itself, letting an attacker without an account run code on a web server. The fixes are in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, and the PHP team says only updating fully protects a server. The flaws, together called PHP2Shell, sit in the PHP runtime, not in any application, so a site is exposed even when its own