PHP2Shell Explained: How an Out-of-Memory Error Became Remote Code Execution
On 21 October 2026, the PHP project shipped an emergency release to fix two critical vulnerabilities that live in the PHP engine itself, not in any application running on top of it. Researchers named them PHP2Shell, and the name is a promise: send the right HTTP requests to a vulnerable server, no login required, and … Read morePHP2Shell Explained: How an Out-of-Memory Error Became Remote Code Execution