> CISA confirms PHP2Shell vulnerabilities now exploited in attacks
[AUTHOR: Sergiu Gatlan]
[DATE: 27/10/2026 08:20]
[LANGUAGE: EN]
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday. [...]