CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution
CISA adds two exploited PHP2Shell flaws to its KEV catalog after honeypot tests confirm remote code execution on a single-worker mod_php setup.
More info