The US Cybersecurity and Infrastructure Security Agency (CISA) has confirmed active exploitation of two critical PHP2Shell remote code execution (RCE) flaws, adding them to its Known Exploited Vulnerabilities (KEV) catalogue.
PHP maintainers have issued mitigation advice for a new remote code execution vulnerability, CVE-2026-115560, which requires a rare combination of configuration settings to exploit.
Security researchers have confirmed active exploitation of PHP2Shell vulnerabilities, allowing remote code execution. A second, unpatched vulnerability has also been identified affecting certain configurations.
A human attacker exploited a remote code execution vulnerability in Marimo notebooks to reach an SSH bastion host in just eight seconds using custom scripts.
