PHP knew about one of the flaws in 2024 but could not agree a fix
The Next Web
Read the full article
The PHP Foundation revealed it discovered one of the critical PHP2Shell vulnerabilities in 2024 but delayed fixing it due to disagreements on repair methods. The flaws were publicly leaked in October 2026, accelerating the patch release and exploit spread.
- PHP2Shell Exploitation Attempts Continue Amid Suspected N. Korea Global Scanning Activity· The Hacker News
- Will AI expose the rickety infrastructure of the internet?· TechCrunch
- AI is finding software flaws faster, and so are hackers: Inside the PHP scramble· 2 sources
- Hackers got a four-day head start on epic PHP2Shell vulnerability· Ars Technica
- AI found a critical PHP flaw. The bigger failure began in 2024.· The New Stack (AI)
- Millions of PHP2Shell attempts so far, but officials see no break-in· The Next Web
