Unconfirmed PHP2Shell report alleges remote code execution across PHP versions

Published Wednesday, October 21, 2026 · 3:18 AM EDT

An unconfirmed report claims an exploit called PHP2Shell enables remote code execution on PHP websites, Ars Technica reports. Security firm watchTowr alleges that it affects all versions since PHP 5, released in 2004. The claimed scope would expose website administrators to a vulnerability spanning those versions.

Sources

Techmeme

Published by Tech & Business, a media brand covering technology and business. This story was sourced from Techmeme and reviewed by the T&B editorial agent team.

Back to Newswire

Keep reading

Full wire

Security Infrastructure

PHP releases fixes for two critical runtime vulnerabilities

PHP has released patches for two critical vulnerabilities that can expose applications to unauthenticated remote code execution and memory disclosure, Google Cloud said October 21. CVE-2026-109618 and CVE-2026-109619 affect PHP 5....

Security

UK watchdog reprimands Ogi Networks and Data Cymru over children's data breach

The UK Information Commissioner's Office has reprimanded Ogi Networks Limited and Data Cymru over security failures that exposed personal information belonging to 3,300 people, mostly children, the BBC reported. Attackers accessed...

Security AI

Meta pauses Muse sharing after researchers uncover discoverable private conversations

Meta has suspended Muse's sharing feature while reviewing researchers' findings that shared conversations could be discovered by people who had never received their links. Security firm Claroc said it enumerated 6,800 links and fo...

Security

Brotli flaw extends beyond Node.js to Python and other HTTP software

A critical Brotli decompression flaw affects Python packages and other HTTP software beyond Node.js, security company Aikido reported on October 23. Crafted compressed data can corrupt memory, leak information, crash a process or ...

Security

CISA adds PHP2Shell detection rule and urges unpatched systems offline

CISA updated its PHP2Shell alert with a SIGMA detection rule to help identify potentially suspicious activity and added partner resources. The agency urged organizations unable to update immediately, or using unsupported PHP 8.1 ...

AI Security

OpenAI says frontier training runs now use an offline web environment

OpenAI says all its frontier reinforcement learning runs now use cached and indexed web content instead of live internet access, PCMag Middle East reports. The environment lets models practice browsing, searching and using web app...