CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution

T2Covered by 1 source · first reported by The Hacker News at 27 Oct, 04:37 UTC

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding them to its Known Exploited Vulnerabilities (KEV) catalog. The PHP vulnerabilities, both rated 9.2 on the CVSS scoring system, facilitate…

security

Sources

• T2CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code ExecutionThe Hacker News27 Oct, 04:37