PHP patches two critical RCE flaws affecting web servers as Cloudflare reports early exploit attempts, with no confirmed ...
PHP released 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to fix two critical vulnerabilities allowing unauthenticated remote code ...
A critical vulnerability was found in PHP.A patched version was released, so I'm updating it.I understand up to this ...
PHP urges organizations to deploy the fixes immediately, as threat actors start abusing the php2shell bug ...
In November 2023, security support for PHP 8.1 ended. As a result, not only PHP 7.4 and earlier, but also systems using PHP 8 ...
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical flaws that allow unauthenticated code execution, in some setups before any application code runs. Here is what goes wrong in the interpreter, ...
PHP2Shell fixes skip older branches. See how many servers run PHP versions with no official patch, which backports exist, and what admins need to do about it soon.
Hackers have started exploiting serious security flaws in PHP, a programming language used by millions of websites worldwide.
The US cyber agency has added CVE-2026-109618 and CVE-2026-109619 to its Known Exploited Vulnerabilities Catalog.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results