|
Article: PHP2Shell: No login, no app code, no warning. What next? - published 12 days ago. Content: If you run PHP anywhere in your environment, patch to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35 now. Two critical flaws disclosed last week, CVE-2026-109618 and CVE-2026-109619 (nicknamed "PHP2Shell"), let an unauthenticated attacker run code on a server with nothing more than a crafted web request. Both carry a CVSS v4.0 score of 9.2, every earlier release is a... https://www.theregister.com/security/2026/10/26/partner-content-no-login-no-app-code-no-warning-what-next/5305336 Published: 2026 10 26 08:00:00 Received: 2026 11 05 17:19:19 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
Click to Open Code Editor