Cybersecurity News
Filters
Filtered by tag: php × Clear
Australian Cybersecurity Magazine
Critical PHP vulnerabilities allow remote execution
Matched: Australia
Australia's cyber security agency has warned of two critical PHP vulnerabilities flagged by the PHP Foundation. The flaws could allow remote code execution, posing significant risk to systems running affected PHP versions. Users and administrators are urged to apply patches promptly and follow guidance from both the ACSC and PHP Foundation to mitigate potential exploitation.
PHP Releases Emergency Patches for PHP2Shell Flaws Threatening Millions of Web Servers
Matched: OpenAI
PHP has released emergency patches for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, dubbed PHP2Shell, which could allow unauthenticated remote code execution on web servers. Both carry a CVSS 4.0 score of 9.2. Fixed versions are PHP 8.2.35, 8.3.36, 8.4.27, and 8.5.12. Administrators should update immediately and restart PHP workers to ensure patched versions are active across all services.