Research
#cve-2026-1096181 article with this tag.
PHP2Shell: two critical PHP bugs, already exploited
PHP shipped emergency fixes on 21 October 2026 for two remote code execution flaws. What happened, and what to check on your servers.
My own findings will go here once they are published. I only publish with permission from the affected party.
Spotted an error in a post? Email hello@ryanhenrick.com.