AITOPAI热报
USGuidelineIn forceDeployers

CISA emergency directive on exploited PHP PHP2Shell vulnerabilities

CISA PHP2Shell 漏洞紧急修复指令
CISA·Published 2026-10-27·Checked by 管理员 on 2026-11-01

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) confirmed active exploitation of two critical PHP vulnerabilities known as PHP2Shell and ordered federal civilian agencies to patch their systems within 3 days. About 70% of internet-facing servers run PHP; some agencies and large companies have taken websites offline to remediate.

Source ↗Remind meUS · All

What it means for you

  • Internet-facing systems running PHP must be patched within 3 days or face active intrusion risk
  • Some organizations are taking sites offline during remediation; prepare maintenance pages and customer notices
  • AI-enabled chaining of previously unexploitable flaws is rising, so long-unpatched legacy vulnerabilities must be prioritized for review

    • What to do

    EngineeringInventory all internet-facing PHP systems and deploy patches within 3 days
    ProductIf patching is not immediately possible, take affected services offline or isolate them
    ComplianceIntegrate CISA's known-exploited vulnerability list into patch prioritization
    LegalAssess business and contractual impact of downtime and notify customers

    Key dates

    2026-10-27Published

    Source documents

    Source ↗

    Coverage

    Stories in the feed
    Editorial summary, not legal advice; dates and status follow the original document. · Report a correction