PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge

PHP has released emergency updates that fix two critical flaws in the language itself letting an attacker without an account run code on a web server The fixes are in PHP 8512 8427 8336 and 8235 and the PHP team says only updating fully protects a server The flaws together called PHP2Shell sit in the PHP runtime not in any application so a site is exposed even when its own