PHP2Shell Leak Forces Emergency Patch Release for Critical RCE Flaws
Two critical PHP vulnerabilities, dubbed 'PHP2Shell,' were leaked before their scheduled disclosure, prompting an emergency patch release at 14:00 UTC on October 21. The flaws, rated 9.2 on the CVSS v4.0 scale, allow remote code execution and affect approximately 70% of websites using server-side scripting. While no active exploitation has been confirmed, security authorities urge immediate preparation for patching, particularly for internet-facing systems.