Critical PHP Vulnerabilities Trigger Global Security Warnings
Severe flaws in the PHP programming language are exposing web servers to remote code execution, forcing organizations worldwide to patch systems or take sites offline.
Two critical vulnerabilities in the PHP programming language, which powers roughly 70 percent of the internet, have been disclosed. Identified by cybersecurity researcher Ryan Austin of Calif, the flaws, dubbed "php2shell," allow attackers to execute arbitrary code on web servers, potentially leading to complete system compromise.
The vulnerabilities affect all PHP versions from 5.4 through 8.5.11. Following the public disclosure, government cybersecurity agencies, including India’s Cert-In, the US CISA, and CERT-EU, issued urgent advisories. Cloudflare reported that exploitation attempts surged from thousands to millions within hours of the announcement. In response, several government and commercial entities have temporarily taken their websites offline to mitigate the risk.
According to findings by Calif, the vulnerabilities were discovered using AI models to analyze existing code patterns. The severity of the situation has prompted the US National Security Agency to advise organizations to prioritize updates or suspend affected services immediately. Given the ubiquity of PHP in platforms like WordPress and Magento, security experts suggest that the impact of these flaws will be felt globally for the foreseeable future.