CISA Confirms Active Exploitation of PHP2Shell Flaws

CISA has added two critical PHP vulnerabilities to its Known Exploited Vulnerabilities catalog. These flaws enable unauthenticated remote code execution on vulnerable deployments. Administrators are strongly advised to apply the available security patches immediately to mitigate active exploitation threats.