Two critical RCEs in PHP core

· Blog Talosintelligence · Oct. 21, 2026, 3:24 p.m.
Threat Advisory Cisco Talos Web Filtering Landing Page Top Story Top Story Cybersecurity PHP Vulnerabilities software development
Summary
Cisco Talos discusses two unauthenticated remote code execution flaws in PHP core, known as 'php2shell', which affect all PHP versions since 5.4 and can be exploited via a plain HTTP request before application code execution.
Read full post on blog.talosintelligence.com →
AUTHOR