https://onurbaydas.com/en/tags/php/Recent content in Php on Onur BaydaşHugoen-usThu, 22 Oct 2026 10:32:06 +0300https://onurbaydas.com/en/news/2026-10-22-ai-uncovers-php-rce-vulnerability/Thu, 22 Oct 2026 10:32:06 +0300https://onurbaydas.com/en/news/2026-10-22-ai-uncovers-php-rce-vulnerability/PHP2Shell, an AI-powered tool, has identified a critical remote code execution vulnerability in PHP. This highlights the increasing role of artificial intelligence in security research.https://onurbaydas.com/en/news/2026-10-22-php-critical-bug-fix/Thu, 22 Oct 2026 10:32:06 +0300https://onurbaydas.com/en/news/2026-10-22-php-critical-bug-fix/PHP developers have released a critical bug fix, warning site owners to take unpatched systems offline. This is because exploits leveraging the vulnerability have already been published.https://onurbaydas.com/en/news/2026-10-22-php-php2shell-rce-patches/Thu, 22 Oct 2026 10:32:06 +0300https://onurbaydas.com/en/news/2026-10-22-php-php2shell-rce-patches/The PHP security team has released emergency patches for two critical remote code execution (RCE) vulnerabilities, collectively known as PHP2Shell. These patches address CVE-2026-109618 and CVE-2026-109619.https://onurbaydas.com/en/news/2026-10-22-php-emergency-rce-patches/Thu, 22 Oct 2026 10:32:06 +0300https://onurbaydas.com/en/news/2026-10-22-php-emergency-rce-patches/PHP has released emergency updates to fix two critical vulnerabilities within the language itself. These flaws allow an attacker to execute code on a web server without requiring an account.https://onurbaydas.com/en/news/2026-10-22-php-critical-rce-patches-lwn/Thu, 22 Oct 2026 10:32:06 +0300https://onurbaydas.com/en/news/2026-10-22-php-critical-rce-patches-lwn/The PHP project has released updated PHP versions to address two critical vulnerabilities that could allow unauthenticated remote code execution. The released versions include PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35.https://onurbaydas.com/en/news/2026-10-22-php2shell-rce-patch-security/Thu, 22 Oct 2026 10:32:06 +0300https://onurbaydas.com/en/news/2026-10-22-php2shell-rce-patch-security/The two critical PHP flaws known as PHP2Shell cannot be fully blocked before today's patch. The security firm that suggested a single setting as a workaround now states it is not enough on its own.https://onurbaydas.com/en/news/2026-10-22-php-critical-rce-vulnerabilities/Thu, 22 Oct 2026 10:32:06 +0300https://onurbaydas.com/en/news/2026-10-22-php-critical-rce-vulnerabilities/Updates have been released for various PHP versions to fix two critical remote code execution vulnerabilities. Server administrators are advised to apply these updates immediately.https://onurbaydas.com/en/news/2026-10-21-php-rce-flaws-emergency-alert/Wed, 21 Oct 2026 10:35:55 +0300https://onurbaydas.com/en/news/2026-10-21-php-rce-flaws-emergency-alert/PHP's security team will release an out-of-cycle security update today for two critical vulnerabilities rated 9.2 on the CVSS v4.0 scale. Although these flaws are not yet detailed, they pose a remote code execution (RCE) potential.https://onurbaydas.com/en/news/2026-10-21-php-emergency-patches/Wed, 21 Oct 2026 10:35:55 +0300https://onurbaydas.com/en/news/2026-10-21-php-emergency-patches/The PHP team announced plans to release two emergency patches imminently. This is linked to claims that an exploit named PHP2Shell allows remote code execution on PHP sites.https://onurbaydas.com/en/news/2026-10-21-php-critical-flaws-patches/Wed, 21 Oct 2026 10:35:55 +0300https://onurbaydas.com/en/news/2026-10-21-php-critical-flaws-patches/The PHP security team announced emergency security updates for two critical vulnerabilities. Patches are expected tomorrow to address these flaws, as details were reportedly leaked ahead of their scheduled disclosure.https://onurbaydas.com/en/news/2026-10-21-php-critical-security-update/Wed, 21 Oct 2026 10:35:55 +0300https://onurbaydas.com/en/news/2026-10-21-php-critical-security-update/A critical security update for PHP addressing two vulnerabilities has been announced. These updates cover the CVE-2026-109618 and CVE-2026-109619 flaws.