Wiz CTO discusses the ongoing aftermath of PHP2Shell, two critical vulnerabilities in PHP affecting ~70% of websites that forced organizations to take sites offline for patching. The cleanup from the initial scare continues as researchers work to address the full scope of the vulnerabilities.
Background
PHP2Shell refers to critical buffer overflow vulnerabilities in PHP's engine (CVE-2024-4577 and CVE-2024-9143) that allowed remote code execution. The term "vulnpocalypse" suggests growing concern over the scale of software vulnerabilities in widely used open-source infrastructure.
- Source
- TechCrunch
- Published
- Oct 29, 2026 at 03:05 AM
- Score
- 7.0 / 10