el="nofollow noopener noreferrer" target="_blank">said Monday that they planned to release patches for two vulnerabilities, both with severity ratings of 9.2 out of a possible 10.

Waiting for PHP2Shell

“All PHP users are encouraged to prepare now so they can upgrade as soon as the release is available,” the advisory stated. “We reserve the right to release earlier should details of either vulnerability become public, or should evidence of active exploitation appear in the wild.”

Read full article

Comments

28:T418,{"@context":"https://schema.org","@type":"NewsArticle","@id":"https://nvdium.com/en/articles/884989453#article","url":"https://nvdium.com/en/articles/884989453","headline":"PHP warns it plans to release 2 emergency patches imminently","description":"Unconfirmed report claims PHP2Shell exploit remotely executes code on PHP sites.","datePublished":"2026-10-21T03:32:44.976Z","dateModified":"2026-10-22T04:17:59.61Z","mainEntityOfPage":"https://nvdium.com/en/articles/884989453","isAccessibleForFree":true,"inLanguage":"en","isPartOf":{"@id":"https://nvdium.com/#website"},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".article-header h1","[data-testid='article-summary']"]},"articleSection":"Technology","keywords":"","image":["https://nvdium.com/nvdium-logo.png"],"author":[{"@type":"Person","name":"Dan Goodin"}],"publisher":{"@type":"Organization","name":"Nvdium","logo":{"@type":"ImageObject","url":"https://nvdium.com/nvdium-logo.png","width":960,"height":960}},"copyrightHolder":{"@type":"Organization","name":"Ars Technica"}}