PHP2Shell is confirmed exploited and on CISA's catalogue with a three-day deadline. We wrote yesterday that no case was public
2026-10-27Security
Successful remote code execution was confirmed against honeypots on 24 October. CISA added both CVEs on the 26th, due the 29th. The sentence we published yesterday is now wrong, and this is the correction.