PHP2Shell: Why websites are going offline for emergency security updates

Summary by Cyber Security News21 Oct 2026, 18:14 CET

About this summary. This is a short excerpt from the description that Malwarebytes Labs published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://www.malwarebytes.com/blog/bugs/2026/10/php2shell-why-websites-are-going-offline-for-emergency-security-updates

If you’ve encountered websites in maintenance mode today, it may be a security precaution. Reports of attacks targeting two critical PHP vulnerabilities have prompted warnings to install emergency updates and consider temporarily taking affected services offline until they can be patched. The vulnerabilities, known as PHP2Shell, are tracked as CVE-2026-109618 and CVE-2026-109619.

Read the full article at Malwarebytes Labs →

Source attribution: headline and facts are from Malwarebytes Labs (malwarebytes.com). Summary method: excerpt of the source description. See our source attribution policy.