
Technology · 26 Oct 2026 · 4 min
PHP2Shell: two critical PHP flaws let attackers take over servers. Update now
On 21 October 2026, PHP fixed two critical vulnerabilities, known as PHP2Shell, that allow remote code execution without a password. Attacks have already been seen. Who is affected, and what to do today.
Read the essay →
















































