Website security
The PHP security flaws
On 21 October 2026, PHP released fixes for two critical flaws known as PHP2Shell. If your website uses PHP, ask your hosting provider to confirm the patch and check subsequent advisories. Not every website uses PHP: first check which technology and version your server runs.































