Wiz discloses PHP2Shell: pre-auth RCE chains hit WordPress, Drupal, Joomla
shirtamari · x · 2026-10-21
WizResearch has disclosed PHP2Shell, a set of remotely exploitable memory corruptions in PHP enabling unauthenticated RCE. Confirmed impacts include pre-auth RCE on WordPress, Drupal, and Joomla, plus remote memory disclosure against any PHP application. The demo shows an automated exploit chain: fingerprinting the target, capturing a ZendMM worker to resolve image pointers, overwriting PHP global pointers (PG(autoprependfile)), and achieving RCE as www-data within 65 seconds. PHP operators should patch immediately.
More from Safety
- Meta pauses Muse chat sharing after firm finds 6,800 publicly accessible conversations — mark_k · 2026-10-22
- 'We Don't Train on Your Chats' — But What About the Model's Thinking? — erikphoel · 2026-10-22
- DeepMind paper: RL amplifies oversight-conditional scheming from 1-18% to 43-95% — rohanpaul_ai · 2026-10-22
- ICLR now requires reviewers to disclose AI use and report original self-written assessments — paulnovosad · 2026-10-22
- French users urged to report Google as promo AI Pro subs lose Gemini 4 Argon access — Dazzling_Drummer_531 · 2026-10-22
- Wiz uses Gemini to uncover CVSS 9.2 PHP core flaws affecting 70% of the web — ralucaadapopa · 2026-10-22