{"id":25663796,"date":"2026-10-23T16:17:30","date_gmt":"2026-10-23T10:47:30","guid":{"rendered":"https:\/\/entri.app\/blog\/?p=25663796"},"modified":"2026-10-23T16:17:30","modified_gmt":"2026-10-23T10:47:30","slug":"php2shell-rce-vulnerabilities","status":"publish","type":"post","link":"https:\/\/entri.app\/blog\/php2shell-rce-vulnerabilities\/","title":{"rendered":"PHP2Shell: The AI-Discovered PHP Vulnerability That Put Websites Worldwide on Alert"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_85 counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-6adb51520139e\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\"  id=\"ez-toc-cssicon-toggle-item-6adb51520139e\"  aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/entri.app\/blog\/php2shell-rce-vulnerabilities\/#What_is_PHP\" >What is PHP?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/entri.app\/blog\/php2shell-rce-vulnerabilities\/#How_were_the_vulnerabilities_found\" >How were the vulnerabilities found?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/entri.app\/blog\/php2shell-rce-vulnerabilities\/#How_AI_was_used\" >How AI was used<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/entri.app\/blog\/php2shell-rce-vulnerabilities\/#What_happened_after_disclosure\" >What happened after disclosure<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/entri.app\/blog\/php2shell-rce-vulnerabilities\/#Why_Indian_websites_should_act_now\" >Why Indian websites should act now<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/entri.app\/blog\/php2shell-rce-vulnerabilities\/#How_to_prevent_attacks\" >How to prevent attacks<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/entri.app\/blog\/php2shell-rce-vulnerabilities\/#The_bigger_lesson\" >The bigger lesson<\/a><\/li><\/ul><\/nav><\/div>\n<ul>\n<li>In October 2026, security researchers disclosed critical vulnerabilities in PHP, nicknamed <strong>PHP2Shell<\/strong>. They were tracked as <strong>CVE-2026-109618<\/strong> and <strong>CVE-2026-109619<\/strong>, with a CVSS v4.0 severity score of <strong>9.2 out of 10<\/strong>.<\/li>\n<li>The flaws could allow an attacker, without logging in, to run malicious code on a vulnerable web server or read sensitive information from server memory, such as passwords, tokens, API keys and certificates.<\/li>\n<li>PHP versions released over the past decade\u2014including those dating back to PHP 5.4\u2014were reported as affected by at least one of the issues.<\/li>\n<li>PHP released emergency patches on <strong>October 21, 2026<\/strong>. The fixed versions are PHP <strong>8.2.35, 8.3.36, 8.4.27 and 8.5.12<\/strong>.<\/li>\n<li>India\u2019s cyber-security agency, <strong>CERT-In<\/strong>, issued a critical alert and advised organisations using PHP to install the updates.<\/li>\n<li>In India, government agencies began patching official websites, while banks reportedly audited applications, took some non-critical services offline and prepared backup arrangements.<\/li>\n<\/ul>\n<h2><span class=\"ez-toc-section\" id=\"What_is_PHP\"><\/span><strong>What is PHP?<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>PHP stands for <strong>PHP: Hypertext Preprocessor<\/strong>. It is a free, open-source, back-end programming language that runs on web servers and helps create dynamic websites\u2014pages that can change based on user actions or stored data.<\/p>\n<p>When you open a website, PHP may be working behind the scenes to collect information, process requests and generate the page you see. It has been widely used since the 2000s and powers platforms such as Wikipedia, WordPress, Drupal and Joomla.<\/p>\n<p>According to Wiz Research, PHP powers about <a href=\"https:\/\/www.wiz.io\/blog\/php2shell-php-rce\" target=\"_blank\" rel=\"noopener\"><strong>70% of websites worldwide<\/strong><\/a>. In India, it is commonly used for government portals, university websites, WordPress-based business sites, online stores and older enterprise systems.<\/p>\n<p>The important point is that the newly disclosed flaws were in <strong>PHP itself<\/strong>, not in a particular website plugin or theme. That means even a website whose own code was secure could be at risk if it ran an unpatched, vulnerable version of PHP.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-25628445 aligncenter\" src=\"https:\/\/entri.app\/blog\/wp-content\/uploads\/2025\/10\/2151877153-_1_-300x205.webp\" alt=\"php2shell\" width=\"439\" height=\"300\" srcset=\"https:\/\/entri.app\/blog\/wp-content\/uploads\/2025\/10\/2151877153-_1_-300x205.webp 300w, https:\/\/entri.app\/blog\/wp-content\/uploads\/2025\/10\/2151877153-_1_-150x102.webp 150w, https:\/\/entri.app\/blog\/wp-content\/uploads\/2025\/10\/2151877153-_1_.webp 700w\" sizes=\"auto, (max-width: 439px) 100vw, 439px\" \/><\/p>\n<h2><span class=\"ez-toc-section\" id=\"How_were_the_vulnerabilities_found\"><\/span><strong>How were the vulnerabilities found?<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Researchers at cyber-security firms <strong>Wiz<\/strong> and <strong>Calif<\/strong>, working with <strong>OpenAI<\/strong>, discovered the vulnerabilities during a coordinated security research effort. Wiz reported that it first found a PHP vulnerability on <strong>August 19, 2026<\/strong>, confirmed remote code execution against Drupal on August 20 and WordPress on August 21, and reported the findings to the PHP security team on August 24.<\/p>\n<p>The bugs were memory-safety issues. In simple terms, PHP could sometimes leave behind corrupted or outdated information in a server\u2019s memory after a request failed\u2014especially during an out-of-memory error. A later request handled by the same server process could then interact with that damaged memory, potentially allowing an attacker to execute code or read private data.<\/p>\n<p>Wiz combined the issues into an exploit called <strong>php2shell<\/strong> and demonstrated unauthenticated remote code execution on test deployments of WordPress, Drupal and Joomla. It also demonstrated that attackers could read sensitive process memory without achieving full code execution.<\/p>\n<p>Ryan Austin, a Calif researcher who helped uncover the flaws, told the BBC: <strong>\u201cIt was the most serious vulnerability I\u2019ve ever found.\u201d<\/strong><\/p>\n<h2><span class=\"ez-toc-section\" id=\"How_AI_was_used\"><\/span><strong>How AI was used<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>AI did not create the vulnerability\u2014the underlying bugs had existed for more than a decade. <strong>What changed was that advanced AI tools made it much faster to analyse the complex PHP code, chain multiple weaknesses together, test different server setups and turn the flaws into a working exploit.<\/strong><\/p>\n<p>Wiz said its team used <strong>Wiz Atlas, Gemini 4 Argon and GPT-5.6 Sol<\/strong> during the research. It credited Gemini 4 Argon with a particularly significant contribution to finding the vulnerability, developing the exploit, detecting attacks and validating the patch.<\/p>\n<p>Before AI, building and adapting such an exploit across different PHP versions, configurations and memory layouts would have required highly specialised manual work. Wiz said AI reduced that barrier, allowing a single researcher to complete in a week what might previously have taken a world-class team months.<\/p>\n<p>OpenAI described the discovery as <strong>\u201cone of the most impactful security issues in recent memory\u201d<\/strong> and said the incident showed both how AI can uncover security flaws and how it can help attackers rapidly develop offensive tools and exploits.<\/p>\n<p><a href=\"https:\/\/www.wiz.io\/blog\/php2shell-php-rce\" target=\"_blank\" rel=\"noopener\"><strong>Raluca Ada Popa, Head of Gemini Security<\/strong> <\/a>at Google DeepMind, said: <strong>\u201cUsing Gemini 4 Argon, the team at Wiz has shown why frontier AI is a game-changer for cyber defense.\u201d<\/strong><\/p>\n<h2><span class=\"ez-toc-section\" id=\"What_happened_after_disclosure\"><\/span><strong>What happened after disclosure<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The PHP Foundation released patches on <strong>October 21, 2026<\/strong>, and urged users to update immediately. Because technical details and exploit information were leaked online before the planned announcement, developers had to rush out the security advisory and patch.<\/p>\n<p>The disclosure triggered a global response:<\/p>\n<ul>\n<li><strong>Wikimedia<\/strong>, the organisation behind Wikipedia, took down some systems as a precaution.<\/li>\n<li>The Finnish government, Edinburgh Council, the BBC and the Netherlands\u2019 cyber-security agency took sites or pages offline.<\/li>\n<li>Several Scottish public organisations, including councils and health boards, also took websites offline.<\/li>\n<li>The US National Security Agency urged organisations using PHP to patch immediately or take systems offline if they could not do so, saying the flaw could provide a \u201cdirect path\u201d to exploit a system\u2019s database.<\/li>\n<li>The UK\u2019s National Cyber Security Centre advised organisations to check for attacker-installed backdoors.<\/li>\n<li>Japan\u2019s Prime Minister Sanae Takaichi urged people to check whether their public websites used PHP and said temporary suspension could reduce risk if patching was not possible quickly.<\/li>\n<\/ul>\n<p>Cloudflare <strong>CEO Matthew Prince<\/strong> <a href=\"https:\/\/x.com\/eastdakota\/status\/2113079352682570051\" target=\"_blank\" rel=\"noopener\"><strong>said on X<\/strong><\/a> that the company saw \u201cthousands\u201d of exploitation attempts in the 10 hours before public disclosure, which rose to \u201ctens of thousands\u201d within 45 minutes of the announcement, \u201chundreds of thousands\u201d within two hours, and \u201cmillions\u201d thereafter.<\/p>\n<h3><strong>Response in India<\/strong><\/h3>\n<p><strong><a href=\"https:\/\/www.csk.gov.in\/alerts\/php2shell-rce-vuln.html\" target=\"_blank\" rel=\"noopener\">CERT-In rated the issue<\/a> critical <\/strong>and warned that a remote attacker could execute arbitrary code and potentially compromise affected systems. It advised all organisations and individuals using PHP to install the latest security updates.<\/p>\n<p>The Indian government began emergency patching of official websites. A Ministry of Electronics and Information Technology official, quoted on condition of anonymity, said: <strong>\u201cThere have been no complaints of disruptions to government websites. All government agencies should comply with CERT-In\u2019s advisory to update their servers with the newly released patches. There is no new direction from our side.\u201d<\/strong><\/p>\n<p>Banks reportedly began auditing applications for weaknesses, taking some non-critical services offline and preparing backups to redirect traffic if parts of their websites or mobile applications experienced downtime.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Why_Indian_websites_should_act_now\"><\/span><strong>Why Indian websites should act now<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>India has a large number of PHP-based websites, including small business sites, college portals, government services and WordPress-powered stores. Many are maintained by external vendors or run on shared hosting, which can delay security updates.<\/p>\n<p>The main risk is not just website defacement. If attackers gain control of a server, they may be able to steal customer data, credentials, payment-related information or access to connected systems. Wiz warned that exposed memory could contain passwords, authentication tokens, API keys and certificates.<\/p>\n<p>Small businesses should not assume that updating WordPress, Joomla, Drupal or their plugins is enough. The fix must be applied to <strong>PHP itself<\/strong>, usually through the hosting provider, server administrator or development team.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\" wp-image-25651887 aligncenter\" src=\"https:\/\/entri.app\/blog\/wp-content\/uploads\/2026\/06\/Cyber-Security-1-300x200.webp\" alt=\"php2shell\" width=\"503\" height=\"335\" srcset=\"https:\/\/entri.app\/blog\/wp-content\/uploads\/2026\/06\/Cyber-Security-1-300x200.webp 300w, https:\/\/entri.app\/blog\/wp-content\/uploads\/2026\/06\/Cyber-Security-1-768x512.webp 768w, https:\/\/entri.app\/blog\/wp-content\/uploads\/2026\/06\/Cyber-Security-1-150x100.webp 150w, https:\/\/entri.app\/blog\/wp-content\/uploads\/2026\/06\/Cyber-Security-1-750x500.webp 750w, https:\/\/entri.app\/blog\/wp-content\/uploads\/2026\/06\/Cyber-Security-1.webp 1000w\" sizes=\"auto, (max-width: 503px) 100vw, 503px\" \/><\/p>\n<h2><span class=\"ez-toc-section\" id=\"How_to_prevent_attacks\"><\/span><strong>How to prevent attacks<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<h3><strong>For website owners<\/strong><\/h3>\n<ul>\n<li><strong>Update PHP immediately<\/strong> to version 8.2.35, 8.3.36, 8.4.27 or 8.5.12, depending on the PHP branch your site uses.<\/li>\n<li><strong>Contact your hosting provider or developer<\/strong> and explicitly ask whether the PHP2Shell security patch has been applied.<\/li>\n<li><strong>Update WordPress, plugins, themes and other software<\/strong>, but remember that this alone does not fix a flaw in the PHP engine.<\/li>\n<li><strong>Review access logs<\/strong> for unusual activity, especially unexpected multipart file-upload requests, memory-limit errors, repeated HTTP 500 errors or unusual PHP worker behaviour.<\/li>\n<li><strong>Use a web application firewall and restrict administrative access<\/strong>, as recommended in CERT-In-related guidance reported by Indian media.<\/li>\n<li><strong>Check backups<\/strong> and ensure they are recent, tested and stored securely.<\/li>\n<li><strong>Temporarily take a site offline<\/strong> if it cannot be patched quickly and it handles sensitive data. The UK\u2019s NCSC and Japan\u2019s Prime Minister both suggested this as a risk-reduction measure.<\/li>\n<\/ul>\n<h3><strong>For IT and security teams<\/strong><\/h3>\n<ul>\n<li>Identify every server, container, staging environment and legacy application running PHP.<\/li>\n<li>Prioritise internet-facing systems and systems that handle personal, financial or login data.<\/li>\n<li>Apply the official PHP patches, restart services as required, and verify the patched version is live.<\/li>\n<li>Search logs for signs of exploitation and check for unexplained administrator accounts, modified files or backdoors.<\/li>\n<li>Monitor vendor advisories, as security agencies have warned that exploitation attempts may increase in the weeks after disclosure.<\/li>\n<\/ul>\n<h3><strong>For ordinary users<\/strong><\/h3>\n<p>Most internet users do not need to update PHP themselves. However, users should follow security notices from websites they use, change passwords if a trusted service asks them to, and be cautious of phishing messages that exploit fear around this incident.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"The_bigger_lesson\"><\/span><strong>The bigger lesson<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>PHP2Shell is a warning about both old software and new AI capabilities. The vulnerabilities had remained hidden for years, but AI made it easier to understand, exploit, and to fix them.<\/p>\n<p>For Indian businesses, educational institutions and government departments, the immediate action is clear: identify PHP-based systems, apply the official patches, verify the update, and review server logs. For the longer term, organisations should treat regular patching, vendor accountability and security testing as essential parts of running a website\u2014not optional IT tasks.<\/p>\n<table>\n<thead>\n<tr>\n<th colspan=\"6\">\n<p style=\"text-align: center;\"><strong>Join Big Tech companies with Entri&#8217;s Courses Now!<\/strong><\/p>\n<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td colspan=\"2\"><a href=\"https:\/\/entri.app\/course\/full-stack-developer-course\/\" target=\"_blank\" rel=\"noopener\"><strong>Full-Stack Web Developer\u00a0<\/strong><\/a><\/td>\n<td colspan=\"2\"><a href=\"https:\/\/entri.app\/course\/data-science-course\/\" target=\"_blank\" rel=\"noopener\"><strong>Data Science<\/strong><\/a><\/td>\n<td colspan=\"2\"><a href=\"https:\/\/entri.app\/course\/python-programming-course\/\" target=\"_blank\" rel=\"noopener\"><strong>Python Programming<\/strong><\/a><\/td>\n<\/tr>\n<tr>\n<td colspan=\"2\"><a href=\"https:\/\/entri.app\/course\/software-testing-course\/\" target=\"_blank\" rel=\"noopener\"><strong>Software Testing<\/strong><\/a><\/td>\n<td colspan=\"2\"><a href=\"https:\/\/entri.app\/course\/devops-course-in-kerala\/\" target=\"_blank\" rel=\"noopener\"><b>DevOps<\/b><\/a><\/td>\n<td colspan=\"2\"><a href=\"https:\/\/entri.app\/course\/online-data-analytics-course\/\" target=\"_blank\" rel=\"noopener\"><strong>Data Analytics<\/strong><\/a><\/td>\n<\/tr>\n<tr>\n<td colspan=\"3\"><a href=\"https:\/\/entri.app\/course\/cyber-security-course-in-kerala\/\" target=\"_blank\" rel=\"noopener\"><strong>Cyber Security<\/strong><\/a><\/td>\n<td colspan=\"3\"><a href=\"https:\/\/entri.app\/course\/ui-ux-design-course-in-kerala\/\" target=\"_blank\" rel=\"noopener\"><strong>UI\/UX Design<\/strong><\/a><\/td>\n<\/tr>\n<tr>\n<td colspan=\"3\"><strong><a href=\"https:\/\/entri.app\/course\/sap-fico-training-course\/\">SAP FICO Course<\/a><\/strong><\/td>\n<td colspan=\"3\"><strong><a href=\"https:\/\/entri.app\/course\/practical-accounting-course\/\">AI-Powered Practical Accounting Course<\/a><\/strong><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n","protected":false},"excerpt":{"rendered":"<p>In October 2026, security researchers disclosed critical vulnerabilities in PHP, nicknamed PHP2Shell. They were tracked as CVE-2026-109618 and CVE-2026-109619, with a CVSS v4.0 severity score of 9.2 out of 10. The flaws could allow an attacker, without logging in, to run malicious code on a vulnerable web server or read sensitive information from server memory, [&hellip;]<\/p>\n","protected":false},"author":129,"featured_media":25663804,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[802,2214,2014],"tags":[],"class_list":["post-25663796","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-articles","category-cybersecurity","category-tech-news"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>What is PHP? Latest Vulnerabilities, Consequences, &amp; Precautions<\/title>\n<meta name=\"description\" content=\"Learn in detail about the latest PHP2Shell vulnerabilities, consequences, and precautions needed through this informative blog.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/entri.app\/blog\/php2shell-rce-vulnerabilities\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"What is PHP? Latest Vulnerabilities, Consequences, &amp; Precautions\" \/>\n<meta property=\"og:description\" content=\"Learn in detail about the latest PHP2Shell vulnerabilities, consequences, and precautions needed through this informative blog.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/entri.app\/blog\/php2shell-rce-vulnerabilities\/\" \/>\n<meta property=\"og:site_name\" content=\"Entri Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/entri.me\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-23T10:47:30+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/entri.app\/blog\/wp-content\/uploads\/2026\/10\/73.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"750\" \/>\n\t<meta property=\"og:image:height\" content=\"375\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Alfred Stephen\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@entri_app\" \/>\n<meta name=\"twitter:site\" content=\"@entri_app\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Alfred Stephen\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/entri.app\\\/blog\\\/php2shell-rce-vulnerabilities\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/entri.app\\\/blog\\\/php2shell-rce-vulnerabilities\\\/\"},\"author\":{\"name\":\"Alfred Stephen\",\"@id\":\"https:\\\/\\\/entri.app\\\/blog\\\/#\\\/schema\\\/person\\\/23977c30d8269825a10c765e4cbe5d74\"},\"headline\":\"PHP2Shell: The AI-Discovered PHP Vulnerability That Put Websites Worldwide on Alert\",\"datePublished\":\"2026-10-23T10:47:30+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/entri.app\\\/blog\\\/php2shell-rce-vulnerabilities\\\/\"},\"wordCount\":1522,\"publisher\":{\"@id\":\"https:\\\/\\\/entri.app\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/entri.app\\\/blog\\\/php2shell-rce-vulnerabilities\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/entri.app\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/73.webp\",\"articleSection\":[\"Articles\",\"Cybersecurity\",\"Tech news\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/entri.app\\\/blog\\\/php2shell-rce-vulnerabilities\\\/\",\"url\":\"https:\\\/\\\/entri.app\\\/blog\\\/php2shell-rce-vulnerabilities\\\/\",\"name\":\"What is PHP? Latest Vulnerabilities, Consequences, & Precautions\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/entri.app\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/entri.app\\\/blog\\\/php2shell-rce-vulnerabilities\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/entri.app\\\/blog\\\/php2shell-rce-vulnerabilities\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/entri.app\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/73.webp\",\"datePublished\":\"2026-10-23T10:47:30+00:00\",\"description\":\"Learn in detail about the latest PHP2Shell vulnerabilities, consequences, and precautions needed through this informative blog.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/entri.app\\\/blog\\\/php2shell-rce-vulnerabilities\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/entri.app\\\/blog\\\/php2shell-rce-vulnerabilities\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/entri.app\\\/blog\\\/php2shell-rce-vulnerabilities\\\/#primaryimage\",\"url\":\"https:\\\/\\\/entri.app\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/73.webp\",\"contentUrl\":\"https:\\\/\\\/entri.app\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/73.webp\",\"width\":750,\"height\":375,\"caption\":\"php2shell\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/entri.app\\\/blog\\\/php2shell-rce-vulnerabilities\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/entri.app\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Tech news\",\"item\":\"https:\\\/\\\/entri.app\\\/blog\\\/category\\\/tech-news\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"PHP2Shell: The AI-Discovered PHP Vulnerability That Put Websites Worldwide on Alert\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/entri.app\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/entri.app\\\/blog\\\/\",\"name\":\"Entri Blog\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/entri.app\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/entri.app\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/entri.app\\\/blog\\\/#organization\",\"name\":\"Entri App\",\"url\":\"https:\\\/\\\/entri.app\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/entri.app\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/entri.app\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/10\\\/Entri-Logo-1.png\",\"contentUrl\":\"https:\\\/\\\/entri.app\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/10\\\/Entri-Logo-1.png\",\"width\":989,\"height\":446,\"caption\":\"Entri App\"},\"image\":{\"@id\":\"https:\\\/\\\/entri.app\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/entri.me\\\/\",\"https:\\\/\\\/x.com\\\/entri_app\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/entri.app\\\/blog\\\/#\\\/schema\\\/person\\\/23977c30d8269825a10c765e4cbe5d74\",\"name\":\"Alfred Stephen\",\"description\":\"With a Master's degree in English Language and Literature, Alfred has been writing SEO-friendly content and articles in various niches including Coding, Commerce, Language Learning, and Healthcare. Additionally, he has also been a part of training LLMs for MNCs to provide efficient answers on complex queries.\",\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/in\\\/alfredstephen\\\/\"],\"url\":\"https:\\\/\\\/entri.app\\\/blog\\\/author\\\/alfreds\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"What is PHP? Latest Vulnerabilities, Consequences, & Precautions","description":"Learn in detail about the latest PHP2Shell vulnerabilities, consequences, and precautions needed through this informative blog.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/entri.app\/blog\/php2shell-rce-vulnerabilities\/","og_locale":"en_US","og_type":"article","og_title":"What is PHP? Latest Vulnerabilities, Consequences, & Precautions","og_description":"Learn in detail about the latest PHP2Shell vulnerabilities, consequences, and precautions needed through this informative blog.","og_url":"https:\/\/entri.app\/blog\/php2shell-rce-vulnerabilities\/","og_site_name":"Entri Blog","article_publisher":"https:\/\/www.facebook.com\/entri.me\/","article_published_time":"2026-10-23T10:47:30+00:00","og_image":[{"width":750,"height":375,"url":"https:\/\/entri.app\/blog\/wp-content\/uploads\/2026\/10\/73.webp","type":"image\/webp"}],"author":"Alfred Stephen","twitter_card":"summary_large_image","twitter_creator":"@entri_app","twitter_site":"@entri_app","twitter_misc":{"Written by":"Alfred Stephen","Est. reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/entri.app\/blog\/php2shell-rce-vulnerabilities\/#article","isPartOf":{"@id":"https:\/\/entri.app\/blog\/php2shell-rce-vulnerabilities\/"},"author":{"name":"Alfred Stephen","@id":"https:\/\/entri.app\/blog\/#\/schema\/person\/23977c30d8269825a10c765e4cbe5d74"},"headline":"PHP2Shell: The AI-Discovered PHP Vulnerability That Put Websites Worldwide on Alert","datePublished":"2026-10-23T10:47:30+00:00","mainEntityOfPage":{"@id":"https:\/\/entri.app\/blog\/php2shell-rce-vulnerabilities\/"},"wordCount":1522,"publisher":{"@id":"https:\/\/entri.app\/blog\/#organization"},"image":{"@id":"https:\/\/entri.app\/blog\/php2shell-rce-vulnerabilities\/#primaryimage"},"thumbnailUrl":"https:\/\/entri.app\/blog\/wp-content\/uploads\/2026\/10\/73.webp","articleSection":["Articles","Cybersecurity","Tech news"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/entri.app\/blog\/php2shell-rce-vulnerabilities\/","url":"https:\/\/entri.app\/blog\/php2shell-rce-vulnerabilities\/","name":"What is PHP? Latest Vulnerabilities, Consequences, & Precautions","isPartOf":{"@id":"https:\/\/entri.app\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/entri.app\/blog\/php2shell-rce-vulnerabilities\/#primaryimage"},"image":{"@id":"https:\/\/entri.app\/blog\/php2shell-rce-vulnerabilities\/#primaryimage"},"thumbnailUrl":"https:\/\/entri.app\/blog\/wp-content\/uploads\/2026\/10\/73.webp","datePublished":"2026-10-23T10:47:30+00:00","description":"Learn in detail about the latest PHP2Shell vulnerabilities, consequences, and precautions needed through this informative blog.","breadcrumb":{"@id":"https:\/\/entri.app\/blog\/php2shell-rce-vulnerabilities\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/entri.app\/blog\/php2shell-rce-vulnerabilities\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/entri.app\/blog\/php2shell-rce-vulnerabilities\/#primaryimage","url":"https:\/\/entri.app\/blog\/wp-content\/uploads\/2026\/10\/73.webp","contentUrl":"https:\/\/entri.app\/blog\/wp-content\/uploads\/2026\/10\/73.webp","width":750,"height":375,"caption":"php2shell"},{"@type":"BreadcrumbList","@id":"https:\/\/entri.app\/blog\/php2shell-rce-vulnerabilities\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/entri.app\/blog\/"},{"@type":"ListItem","position":2,"name":"Tech news","item":"https:\/\/entri.app\/blog\/category\/tech-news\/"},{"@type":"ListItem","position":3,"name":"PHP2Shell: The AI-Discovered PHP Vulnerability That Put Websites Worldwide on Alert"}]},{"@type":"WebSite","@id":"https:\/\/entri.app\/blog\/#website","url":"https:\/\/entri.app\/blog\/","name":"Entri Blog","description":"","publisher":{"@id":"https:\/\/entri.app\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/entri.app\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/entri.app\/blog\/#organization","name":"Entri App","url":"https:\/\/entri.app\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/entri.app\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/entri.app\/blog\/wp-content\/uploads\/2019\/10\/Entri-Logo-1.png","contentUrl":"https:\/\/entri.app\/blog\/wp-content\/uploads\/2019\/10\/Entri-Logo-1.png","width":989,"height":446,"caption":"Entri App"},"image":{"@id":"https:\/\/entri.app\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/entri.me\/","https:\/\/x.com\/entri_app"]},{"@type":"Person","@id":"https:\/\/entri.app\/blog\/#\/schema\/person\/23977c30d8269825a10c765e4cbe5d74","name":"Alfred Stephen","description":"With a Master's degree in English Language and Literature, Alfred has been writing SEO-friendly content and articles in various niches including Coding, Commerce, Language Learning, and Healthcare. Additionally, he has also been a part of training LLMs for MNCs to provide efficient answers on complex queries.","sameAs":["https:\/\/www.linkedin.com\/in\/alfredstephen\/"],"url":"https:\/\/entri.app\/blog\/author\/alfreds\/"}]}},"_links":{"self":[{"href":"https:\/\/entri.app\/blog\/wp-json\/wp\/v2\/posts\/25663796","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/entri.app\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/entri.app\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/entri.app\/blog\/wp-json\/wp\/v2\/users\/129"}],"replies":[{"embeddable":true,"href":"https:\/\/entri.app\/blog\/wp-json\/wp\/v2\/comments?post=25663796"}],"version-history":[{"count":1,"href":"https:\/\/entri.app\/blog\/wp-json\/wp\/v2\/posts\/25663796\/revisions"}],"predecessor-version":[{"id":25663805,"href":"https:\/\/entri.app\/blog\/wp-json\/wp\/v2\/posts\/25663796\/revisions\/25663805"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/entri.app\/blog\/wp-json\/wp\/v2\/media\/25663804"}],"wp:attachment":[{"href":"https:\/\/entri.app\/blog\/wp-json\/wp\/v2\/media?parent=25663796"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/entri.app\/blog\/wp-json\/wp\/v2\/categories?post=25663796"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/entri.app\/blog\/wp-json\/wp\/v2\/tags?post=25663796"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}