CERT24CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code ExecutionLoading data…
CERT24Threat Observatory
Period

CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) confirmed that two recently patched PHP2Shell vulnerabilities are being actively exploited and added them to the Known Exploited Vulnerabilities (KEV) catalog. Both vulnerabilities enable unauthenticated remote code execution and are rated 9.2 on the CVSS scale.

← Back to intelligence

CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) confirmed that two recently patched PHP2Shell vulnerabilities are being actively exploited and added them to the Known Exploited Vulnerabilities (KEV) catalog. Both vulnerabilities enable unauthenticated remote code execution and are rated 9.2 on the CVSS scale.