CISA adds two PHP2Shell flaws to exploited vulnerabilities catalog
The recently patched vulnerabilities allow remote code execution without authentication and both carry CVSS severity scores of 9.2, according to The Hacker News. CISA has ordered federal agencies to patch their systems by Thursday, BleepingComputer reports, following confirmation that the flaws are being exploited in attacks.
Covered by 2 publishers within 4 hours of the first report.
- The Hacker News: CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution
- Latest BleepingComputer: CISA confirms PHP2Shell vulnerabilities now exploited in attacks
Reporting2
The Hacker News CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution · info@thehackernews.com (The Hacker News)
BleepingComputer CISA confirms PHP2Shell vulnerabilities now exploited in attacks · Sergiu Gatlan