.png)

PHP2Shell Fact Sheet
How the PHP2Shell attack works, who is affected and what to do about it.
Points saillants
Principaux avantages
Aperçu des actifs
PHP2Shell is a pair of critical flaws in the PHP engine, patched on October 21, 2026. They let attackers run code on web servers without logging in.
PHP runs most of the web, including some of its most popular sites and platforms such as WordPress, Drupal and Joomla. These bugs sit inside the engine itself, so an attacker can strike before your website's own code or login checks even run.
This fact sheet explains how the attack works, which PHP versions are affected and the steps to take now. Patching matters. But segmentation keeps one breached server from becoming many.






Supposons une rupture.
Minimiser l'impact.
Augmenter la résilience.
Partir du principe que l'imprévu peut survenir à tout moment conduit à adopter les comportements suivants












%2520(1).webp)
