{
  "id": 17929866,
  "title": "PHP2Shell, What Was That About?",
  "url": "https://urgent.news/2026/11/03/php2shell-what-was-that-about",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-03T07:49:21.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/mfarrasmajid/php2shell-what-was-that-about-2l6m"
  },
  "original_language": "en",
  "account": "On 21 October 2026, two critical vulnerabilities in PHP-based servers emerged, prompting emergency maintenance and patching at numerous web-based games. These vulnerabilities, CVE-2026-109618 and CVE-2026-109619, allowed attackers to access a web shell from PHP through remote code execution. Affected servers were urged to upgrade to the latest PHP version, currently 8.5.12, or adopt one of the recommended patches for older versions.\n\nFailure to update PHP could result in compromised servers, as any web-based code, even as simple as echoing \"Hello World!\", could be exploited. PHP2Shell is not a named library, but rather a term that describes the nature of these vulnerabilities, which allow direct access to a web shell through PHP's runtime. This poses a severe threat, as potential attackers could exploit the vulnerabilities with minimal effort, regardless of the code being run on the server.\n\nFor those unable to upgrade to the latest PHP version, remediation involves a clean build of the container and ensuring the PHP installation follows the latest version. The situation underscores the importance of regularly updating PHP and promptly applying security patches to safeguard web servers from exploitation.",
  "summary": "Recently, about two weeks ago on 21 October 2026, there were two vulnerabilities announcement which shook most of the internet, caused permanent EoS (End of Services) at web based games like World Quest and Emergency Maintenance at some other like Umamusume: Pretty Derby, Grandblue Fantasy, and Path of Titans. The vulnerabilities affecting PHP based server, named CVE-2026-109618 and…",
  "key_points": [
    "Two critical PHP vulnerabilities emerged on 21 October 2026",
    "Attackers could access web shell via remote code execution",
    "Servers urged to upgrade PHP to 8.5.12 or apply patches"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}