news
BleepingComputer
October 27th, 2026 at 8:20 AM

CISA confirms PHP2Shell vulnerabilities now exploited in attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday. [...]

Get stories like this every Monday

The week's most important AI news in one email. Free, unsubscribe anytime.

Score: 2.89

Engagement proxy: 0

Canonical link: https://www.bleepingcomputer.com/news/security/cisa-confirms-php2shell-vulnerabilities-now-exploited-in-attacks/