PHP2Shell: Why many websites had to go offline
Many sites were taken offline so admins could patch two critical PHP flaws that could have let attackers run malicious code on their servers.
- Vendor
- PHP
- Product
- PHP
- EPSS
- 1.00 (p100)
- Exposure class
- Web platform
Why it ranks 34 (Notable)
- EPSS 1.00 (high probability of exploitation)
- Product class: web platform
- Covered by 34 independent sources
- Reporting
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Malwarebytes Labs (malwarebytes.com)
- CVE-2026-109618 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-109619 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.