Vulnerabilities
PHP2Shell RCE Flaws: Workaround Insufficient Before October Patch
Experts warn that disabling session upload progress does not stop PHP2Shell exploitation until the official vendor patch is applied.
PHP
Everything Firewall Pulse has reported about PHP: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Vulnerabilities
PHP Critical RCE Bugs Leaked Online; Patches Due Oct 21, 2026 Amid Mass Exploit Warnings
Critical unauthenticated RCE bugs in PHP versions 5 and later have been leaked online, with patches scheduled for release on 21 October 2026.