Global PHP Security Crisis: Millions of Websites at Risk as Critical Vulnerabilities Are Uncovered

10/22/2026

The NSA (National Security Agency/Central Security Service) just dropped an urgent cybersecurity warning- so in case someone is running PHP, the vulnerabilities, known as ‘PHP2Shell’, could let...

10/22/2026

Critical PHP2Shell flaws could enable remote code execution and memory leaks, prompting security patches and industry-wide action.

10/22/2026

Two critical PHP vulnerabilities could allow attackers to compromise web servers without authentication, prompting emergency security updates and warnings from cybersecurity authorities, including...

10/22/2026

The issue, known as PHP2Shell, led to emergency patches for two vulnerabilities that could enable remote code execution.

10/22/2026

The PHP2Shell vulnerabilities could allow hackers to execute code remotely without authentication, prompting cybersecurity agencies to urge organisations to patch affected systems or take them...

10/22/2026

‘PHP2Shell’ remote code execution vulnerability patched, but organizations need to identify vulnerable systems and update to the latest PHP version, agencies warn

10/22/2026

CERT-In has rated two new PHP flaws critical as government sites and parts of Wikipedia go offline worldwide. Here is what PHP2Shell is and what it means for you.

10/22/2026

October 22, 2026, saw millions of hackers attempt to take advantage of two major vulnerabilities in PHP. Governments and businesses had to take down some online systems while expert teams hurried...

10/22/2026

Updated on Thursday, Oct. 22 at 12:25 p.m. ET — The PHP security issues known as PHP2Shell sent the cybersecurity world into a frenzy yesterday, and now we have some data on the...

10/22/2026

Website hosts need updated PHP software to fix two memory flaws that can let attackers run server code without logging in.

10/21/2026

PHP has released emergency updates that fix two critical flaws in the language itself, letting an attacker without an account run code on a web server. The fixes are in PHP 8.5.12, 8.4.27, 8.3.36...

10/21/2026

You cannot fully block the two critical PHP flaws called PHP2Shell before today's fix, and the one setting being passed around as a workaround is not enough on its own, the security firm that...

10/21/2026

This story is developing and was written before PHP's scheduled 14:00 UTC release on October 21. Once the release is out, the affected and fixed versions below are confirmed by the official...