Two critical PHP RCE flaws (PHP2Shell) actively exploited; remediation urged

Recorded Future reports active exploitation of two critical PHP remote code execution vulnerabilities, collectively dubbed PHP2Shell. The write-up details exposed systems, exploit mechanics, and remediation steps. The scope of affected deployments and patch availability remain uncertain, but active exploitation elevates urgency for organizations running vulnerable PHP versions.

AI disclosure: Model-written summary of the source, not a verified fact. Check the sources. How Mosaic works