CERT24PHP2Shell: Two Unpatched Critical PHP RCE Vulnerabilities (CVSS 9.2) Trigger Emergency Security AlertLoading data…
CERT24Threat Observatory
Period

PHP2Shell: Two Unpatched Critical PHP RCE Vulnerabilities (CVSS 9.2) Trigger Emergency Security Alert

PHP planned to issue an out-of-cycle security release on October 21 for two critical vulnerabilities that its security team rated 9.2 on the CVSS v4.0 scale. Security researchers said the flaws allow remote code execution. The affected and fixed versions had not yet been officially confirmed when the article was written.

← Back to intelligence

PHP2Shell: Two Unpatched Critical PHP RCE Vulnerabilities (CVSS 9.2) Trigger Emergency Security Alert

PHP planned to issue an out-of-cycle security release on October 21 for two critical vulnerabilities that its security team rated 9.2 on the CVSS v4.0 scale. Security researchers said the flaws allow remote code execution. The affected and fixed versions had not yet been officially confirmed when the article was written.