Security News CISA confirms PHP2Shell vulnerabilities now exploited in attacks BleepingComputer Daniel Bender 27 Oct 2026 Share The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday.
