Security News CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution TheHackerNews Daniel Bender 27 Oct 2026 Share CISA adds two exploited PHP2Shell flaws to its KEV catalog after honeypot tests confirm remote code execution on a single-worker mod_php setup.
