Oct 27 2026 CISA confirms PHP2Shell under attack as researchers clock successful exploits

Source

Both critical PHP flaws land on the agency’s exploited list as infosec pros confirm hackers are getting working shells [...]