Two critical RCEs in PHP core

· Blog Talosintelligence · Oct. 21, 2026, 3:24 p.m.
Threat Advisory Cisco Talos Web Filtering Landing Page Top Story Top Story Cybersecurity PHP Vulnerabilities software development
Summary
Cisco Talos discusses two unauthenticated remote code execution flaws in PHP core, known as 'php2shell', which affect all PHP versions since 5.4 and can be exploited via a plain HTTP request before application code execution.
Read full post on blog.talosintelligence.com →
AUTHOR
Advertise
Sponsor diff.blog
Put your product in front of developers who read and write about their craft. One exclusive sponsor at a time.
Become a sponsor →