Urgent Cybersecurity Alert: Critical PHP Vulnerabilities Under Active Exploitation by Hackers

CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution

10/27/2026

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding them to its Known Exploited...

The Record

CISA warns of PHP bug exploitation attempts, gives federal agencies days to patch

10/27/2026

CISA added the widely publicized PHP vulnerabilities to the KEV, but didn't specify what kind of exploitation it was observing.

TechCrunch

US government says hackers are now exploiting critical PHP web bugs

10/27/2026

The U.S. government cyber agency warns that hackers have figured out a way to exploit the popular PHP software, used in 70% of the web's software.

Economic Times

Cert-In and states rush to patch PHP flaws across govt portals

10/27/2026

Last week, two critical cybersecurity flaws in the PHP programming language were discovered with the help of AI. Subsequently, Cert-In issued advised organisations to apply security patches....

ET CISO

Critical flaw affecting 70% of all websites has cybersecurity world panicked

10/26/2026

A major vulnerability in the PHP programming language has emerged, impacting numerous global websites. In response, governments and cybersecurity firms are strongly recommending urgent updates to...