Two critical RCEs in PHP core

Summary by Cyber Security News21 Oct 2026, 17:10 CET

About this summary. This is a short excerpt from the description that Cisco Talos published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://blog.talosintelligence.com/two-critical-rces-in-php-core/

Two critical RCEs in PHP core — Image: Cisco Talos

Cisco Talos is tracking the disclosure of two unauthenticated remote code execution (RCE) flaws in PHP core, dubbed “php2shell”, triggered by a plain HTTP request and exploitable before any application code runs, affecting every PHP build since 5.4.

Read the full article at Cisco Talos →

Source attribution: headline and facts are from Cisco Talos (blog.talosintelligence.com). Summary method: excerpt of the source description. See our source attribution policy.