CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution

As cited

Copy frozen at 2026-10-27 08:34 UTC (site build).

vulnerabilities

CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added two PHP vulnerabilities to its Known Exploited Vulnerabilities catalog after confirming active exploitation in the wild. Both flaws, rated 9.2 on the CVSS scale, allow unauthenticated remote code execution on affected systems.

Why it matters: Organizations running vulnerable PHP deployments face immediate risk of compromise; patching these KEV-listed flaws should be prioritized.

Source published

2026-10-27 04:37 UTC

First seen by Cybersecurity Tracker

2026-10-27 07:17 UTC