# InfraTrust warns appliance firmware delays PHP2Shell remediation

_Published Wednesday, October 28, 2026 at 11:02 AM EDT · Security, Infrastructure · Latest · Tier 2 — Notable_

![InfraTrust warns appliance firmware delays PHP2Shell remediation — Primary](https://www.bleepstatic.com/content/hl-images/2026/07/21/infratrust.jpg)

Eclypsium's October InfraTrust Pulse warns that network appliances embedding PHP in their management interfaces leave customers dependent on vendor firmware updates to fix PHP2Shell vulnerabilities. The two flaws allow unauthenticated remote code execution; the PHP project fixed them on October 21.

The report tracked 133 new security advisories across 18 vendors between September 18 and October 14, covering 2,813 vulnerabilities. Sixteen advisories included actively exploited vulnerabilities listed by CISA. InfraTrust recommends keeping PHP-backed management interfaces off the internet while awaiting appliance patches, because customers commonly cannot update the embedded PHP themselves.

## Sources

- [BleepingComputer](https://www.bleepingcomputer.com/news/security/infratrust-report-warns-of-exploited-flaws-in-critical-network-infrastructure/)

---
Canonical: https://techandbusiness.org/newswire/V6Str4lpslfzJICncT3amr
Published: 2026-10-28T15:02:47.935Z
Story chronology: 2026-10-28T14:00:00.000Z
Retrieved: 2026-10-28T18:12:02.987Z
Publisher: Tech & Business (techandbusiness.org)