Sections
News in perspective
tafs uz
News

PHP2Shell

News about PHP2Shell: events, facts and developments on tafs uz.

4 stories

Technology

CISA confirmed active exploitation of critical PHP vulnerabilities and gave federal agencies three days to patch them

The American cybersecurity agency CISA reported that hackers have begun using two critical PHP vulnerabilities (PHP2Shell) in real-world attacks, allowing remote takeover of servers without a password. The agency added the bugs to its catalog of known exploited vulnerabilities and required US civilian federal agencies to patch them within three days. The vulnerabilities were discovered two years ago but were considered impractical to exploit until researchers at Calif found a way to exploit them using AI.

Otabek Yusupov
2 min read
Technology

A PHP vulnerability put the internet on the brink of mass compromise

Two critical vulnerabilities that had existed for decades were discovered in the open programming language PHP. Website owners were instructed to install updates immediately or temporarily take their resources offline. Cloudflare recorded millions of attack attempts, and Amazon recorded exploitation attempts even before the public disclosure.

Otabek Yusupov
2 min read
Technology

PHP2Shell vulnerability forces websites worldwide to urgently update PHP

Two critical vulnerabilities have been discovered in the popular programming language PHP, allowing remote code execution without authentication. The FBI and the US NSA warned of the threat, the Netherlands and France took some government websites offline, several countries declared cyber alerts, and Turkey conducted checks and issued guidance for organizations.

Madina Usmonova
2 min read
Technology

PHP2Shell vulnerability: governments and companies worldwide urgently take websites offline

After the disclosure of two critical vulnerabilities in the PHP language (CVE-2026-109618 and CVE-2026-109619), known as PHP2Shell, governments and companies around the world temporarily took websites offline to install patches. In the UK, 32 government services were unavailable and four were running partially; Cloudflare recorded millions of attack attempts. The vulnerabilities allowed remote code execution without a password on systems running PHP, which powers about 70% of websites. No mass exploitation has been observed so far, but After the disclosure of two critical vulnerabilities in the PHP language (CVE-2026-109618 and CVE-2026-109619), known as PHP2Shell, governments and companies around the world temporarily took websites offline to install patches. In the UK, 32 government services were unavailable and four were partially working; Cloudflare recorded millions of attack attempts. The vulnerabilities allowed remote code execution without a password on systems running PHP, which powers about 70% of websites. No mass exploitation has been recorded so far, but

Sevara Azamova
4 min read