Technology 13 sources · over 5 days 23 articles

PHP releases emergency patches for two critical PHP2Shell security flaws

Emergency fixes are now available for two critical PHP vulnerabilities, after warnings that organisations unable to patch quickly should consider taking their websites offline.

Read the full story → · Latest coverage 21 Oct 2026, 2:29 pm UTC

Key moments · 5

PHP warns administrators after vulnerability information reportedly leaks

BleepingComputer ↗

EU response team advises possible shutdowns for unpatched websites

The Next Web ↗

Proposed configuration workaround falls short of full protection

The Hacker News ↗

PHP ships emergency patches for both PHP2Shell vulnerabilities

BleepingComputer ↗

Cloudflare announces protections against newly disclosed PHP2Shell flaws

The Cloudflare Blog ↗

Coverage by day

newest first

67 articles

  1. Urgent security fix issued for code vital to estimated 70% of all websites
    ABC News
  2. Urgent security updates for PHP due to serious vulnerabilities
    DEV Community
  3. Today's PHP Security Release, and How We're Strengthening PHP Security
    Hacker News: Front Page Startups
  4. European governments pull websites offline over two critical PHP flaws
    The Next Web
  5. Explainer-What is PHP and why did it take government websites offline?
    World News CNA

3 articles

  1. Критическая уязвимость в PHP
    Публикации по подписке
  2. PHP warns admins of two critical flaws, emergency patches coming tomorrow
    BleepingComputer
  3. Upcoming Critical PHP Security Release
    Hacker News: Front Page Startups

1 article

  1. Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw
    SecurityWeek

1 article

  1. Drupal CVE-2026-108097 and CVE-2026-108099: Pre-Authentication RCE Vectors in Field UI and Entity List
    DEV Community

2 articles

  1. Drupal patches two critical remote code execution flaws
    DEV Community
  2. Drupal patches critical RCE flaws, warns exploits may emerge soon
    BleepingComputer