PHP Issues Severe Warning Over Two Vulnerabilities Affecting 70% of Web
The PHP group warns of two flaws dubbed PHP2Shell that could impact most websites, urging immediate patching despite early attack reports.
Key points
- Two major vulnerabilities in PHP were identified by AI and dubbed PHP2Shell.
- Experts estimate up to 70% of all websites could be affected by these flaws.
- Patches were scheduled for Wednesday, but early attacks are already emerging.
The agency responsible for monitoring the PHP programming language issued a severe warning on Tuesday regarding two major cybersecurity vulnerabilities. The exploit associated with these flaws was dubbed PHP2Shell, and the issues were identified by artificial intelligence systems.
Security experts are urging immediate action from website administrators because fixes were scheduled for deployment on Wednesday at 10 a.m. ET. The warnings carry an unusual severity level, prompting urgent communication to the developer community to take immediate notice and precautions.
Context and Background
According to the Wall Street Journal, these vulnerabilities could affect approximately 70% of the world’s websites. PHP is a free, open-source programming language that serves as the backbone for much of the current web infrastructure, making widespread adoption a significant factor in the potential impact.
The identification of these flaws by AI tools highlights a shifting landscape in vulnerability discovery. The monitoring agency’s severe warning reflects the critical nature of the alert, urging administrators to prioritize security measures before the scheduled patch deployment.
Who Is Affected
Cloudflare’s chief technology officer Dane Knecht confirmed on Wednesday morning that the company had deployed a fix for the vulnerabilities. However, he noted that the organization is still seeing early attacks emerging, indicating that some systems may already be targeted.
This developing situation requires continuous monitoring as more details about the exploit mechanics and affected versions may emerge. Administrators relying on PHP-based services must assume their systems are at risk until patches are verified and fully applied across their infrastructure.
What should you do?
Website administrators should prioritize applying the Wednesday patches immediately to mitigate exposure to the PHP2Shell exploits. Security teams should monitor their logs for unusual activity indicative of early-stage attacks, even after patching, as residual threats may persist.
Organizations relying on third-party hosting providers should verify that their vendors have applied the necessary updates. Proactive scanning for outdated PHP versions is essential to identify any legacy systems that may not receive automatic updates or manual attention.
What to do and how to stay safe: PHP
- Verify that your web server has received the PHP patches released on Wednesday morning.
- Monitor server logs for suspicious activity that could indicate exploitation attempts.
- Contact hosting providers to confirm they have applied the latest security updates.
- Scan internal networks for outdated PHP versions that may remain vulnerable.
Step-by-step guide: Mobile Device Security: How to Protect Data Beyond Passwords
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
What is PHP2Shell?
PHP2Shell is the name given to the exploit associated with two major cybersecurity vulnerabilities in PHP identified by AI.
How many websites are at risk?
According to the Wall Street Journal, up to 70% of the world’s websites could be affected by these vulnerabilities.
Are patches available?
Fixes were scheduled for deployment on Wednesday at 10 a.m. ET, and Cloudflare has confirmed deploying a patch.
