1 article, most recent October 22, 2026.
PHP2Shell exposes two CVEs that let attackers run code on 70% of sites. PHP released emergency fixes for the two CVEs on the same day.