SecuritySecurityWeekabout 1 hour ago
PHP2Shell Flaws Leak Before Patch Date
2 min read
Two critical PHP vulnerabilities named PHP2Shell were leaked online ahead of a scheduled patch release on Wednesday, 21 October 2026 at 14:00 UTC. Both flaws carry a CVSS score of 9.2 and could allow remote code execution without authentication. While WatchTowr confirmed the issues are real, Sansec predicts mass exploitation will begin within 15 minutes of the official fix.
Level
Hype check
Tap to vote and see what everyone thinks.
