Unverified50% confidenceFactExact time
The PHP2 Shell vulnerability affects versions dating back at least to PHP 5.4, every PHP version released in the past 10 years is affected by at least one of these vulnerabilities, and the vulnerability has existed for 14 years.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/25/2026
First Seen
Valid until: 1/23/2027
Sources
Related Entities
Related Claims
UnverifiedPHP has been disclosed to have two critical-severity security vulnerabilities.79% similarUnverifiedThe core risk of the php2shell vulnerability is that it extends from a flaw at the PHP level to shell command execution.76% similarUnverifiedPHP officially released a security update on October 21, 2026 covering the entire PHP 8.x series, fixing two vulnerabilities that can lead to remote code execution.76% similarUnverifiedPHP's enormous installed base and large number of outdated versions that are not updated in time make the potential spread of such vulnerabilities extremely fast.76% similarUnverifiedOpenAI called the PHP vulnerability "one of the most severe vulnerabilities in recent years."72% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1094884API
curl https://kongchang.com/api/v1/knowledge/claims/1094884MCP
get_claim(id=1094884)