PHP2Shell: The High-Stakes Vulnerability Threatening Millions of Web Servers
The PHP development team has issued an emergency security alert following the discovery of two critical unpatched Remote Code Execution (RCE) vulnerabilities, collectively known as PHP2Shell. These flaws, carrying a high-severity CVSS score of 9.2, were leaked prematurely, forcing a rapid response to protect web infrastructure. If exploited, the vulnerabilities allow attackers to execute arbitrary code on servers, potentially leading to complete system compromise. Administrators are urged to transition to the updated PHP versions immediately to safeguard their environments against this high-impact threat.