The US Cybersecurity and Infrastructure Security Agency (CISA) has confirmed active exploitation of two critical PHP2Shell remote code execution (RCE) flaws, adding them to its Known Exploited Vulnerabilities (KEV) catalogue.
Security researchers have confirmed active exploitation of PHP2Shell vulnerabilities, allowing remote code execution. A second, unpatched vulnerability has also been identified affecting certain configurations.
