1M+ PHP services patched in 24h, but ~40M still exposed to PHP2Shell CVEs
FanaHOVA · x · 2026-10-23
Censys' PHP2Shell tracker shows over 1 million PHP services patched within 24 hours for CVE-2026-109618/109619, yet 39.8M services still run affected versions. Fixed releases are 8.2.35, 8.3.36, 8.4.27 and 8.5.12; branches 8.1 and older have no official fix. About 41M services have been seen vulnerable since tracking began Oct 21.
More from Infra
- MiniMax M3.1 Flash free for 3 days on 0G, with 1M context and 512K output — MiniMax_AI · 2026-10-23
- "We bet on Cloudflare and it paid off": R2 and D1 at billion scale — dinasaur_404 · 2026-10-23
- Public data is drying up; private training data is turning into a browsable catalog — SucceededMind · 2026-10-23
- Tracking Chip Heat Propagation with a Thermal Master P3 Camera — yaroslavvb · 2026-10-23
- Bloom Energy Q3 revenue hits $1.24B, up 138% YoY, raises FY26 guidance to $4.4-4.6B — Beth_Kindig · 2026-10-23
- Trader dismisses AI circular financing theory: every new megawatt booked at rising spot prices — JOBhakdi · 2026-10-23