CISA confirms PHP2Shell vulnerabilities now exploited in attacks
BLEEPINGCOMPUTER — The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday. [...]
- CODE
- RT-77D8F3
- PUBLISHER
- BleepingComputer
- TOPIC
- Cybersecurity
- PUBLISHED
- 27 October 2026 · 08:20 UTC
- FIRST SEEN
- 28 October 2026 · 12:19 UTC
- ORIGINAL
- https://www.bleepingcomputer.com/news/security/cisa-confirms-php2shell-vulnerabilities-now-exploited-in-attacks/
- SHA-256
- 5aa67a25a9eb6dc51450a237f829c4cebdd990aa7608bf67d409cfdb5fe6d196
The fingerprint is the SHA-256 of the original link, the headline and the publication time joined by “|”. Anyone can recompute it to confirm the headline and link were not changed here.
Headline and short excerpt from BleepingComputer, taken from its public news feed. The full story and its photos belong to BleepingComputer — read it at the original. RICHTVX NEWS is an independent aggregator and is not affiliated with BleepingComputer. Corrections: legal@richtvx.news.
More from BLEEPINGCOMPUTER
InfraTrust report warns of exploited flaws in critical network infrastructureRT-60CCB0 · CYBERSECURITY
Even after PHP2Shell, blast radius matters more than a CVSS scoreRT-219F99 · CYBERSECURITY
Hackers now scanning systems for recently-patched Oracle flawRT-7C2248 · CYBERSECURITY
CISA warns of hackers now exploiting critical Node2Shell flawRT-AA5619 · CYBERSECURITY
Nefilim and Hive ransomware affiliate gets 70 months in prisonRT-965A65 · CYBERSECURITY
Japan's GMO urges customers to shut down PCs amid ransomware threatRT-5246B1 · CYBERSECURITY
