Security· ★★★· bearish·

Theori reproduces critical PHP2Shell flaw in PHP engine, issues emergency guidance

  • —PHP2Shell carries a CVSS v4.0 score of 9.2, rated Critical
  • —Affected: PHP 8.2.34, 8.3.35, 8.4.26, 8.5.11 and all 8.1-and-older builds
  • —PoC video and patched binaries leaked before the official advisory
  • —Theori urges upgrades to 8.2.35, 8.3.36, 8.4.27 and 8.5.12
Why it matters: The flaw affects PHP-based infrastructure at crypto exchanges and payment gateways, and exploit code is already circulating.
Source: Digital Today
More on this
Security · 09:24
Hackers Exploited PHP2Shell Flaws Four Days Before Patches
 Security · 05:42
Critical PHP2Shell flaw threatens crypto exchanges and payment gateways
 Security · 02:15
Over 10 governments warn of PHP flaw threatening cyberspace