CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution
Medium Severity
Global
Date OccurredOct 27, 202604:37 UTC
Event TypeCyber Intelligence
SourceTheHackerNews
RecordedOct 27, 2026
Full Description
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding them to its Known Exploited Vulnerabilities (