On October 21, 2026, PHP released security fixes for two critical vulnerabilities, known as “PHP2Shell.” If they aren’t patched, attackers could take control of affected web servers. Attacks are already being reported, so it’s important to act quickly.
Who could be affected
PHP is used by many websites, customer portals, and web applications, including popular platforms like WordPress and Drupal. It also runs behind the scenes in many vendor products. If your organization uses any of these, you may be affected.
What to do
- Find out whether PHP is running in your environment.
- Apply the latest updates from PHP and from your software vendors as soon as they’re available.
- Follow the official guidance linked below for details and next steps.
Official resources
- PHP Security Advisory: https://www.php.net/archive/2026.php#2026-10-21-5
- List of affected software (National Cyber Security Centre of the Netherlands): https://github.com/NCSC-NL/php2shell/tree/main
Need help?
If you’re not sure whether you’re affected, our team is here tohelp. Contact your CMA AE or reach out to us today.
Related Resources
IT Mentorship in Your Inbox
Subscribe and stay up to date on the latest insights, expert advice, and happenings in IT.