Global security agencies issue urgent warnings over critical PHP bugs

Global cybersecurity agencies including the NSA, FBI, NCSC, and CERT-EU warned that two critical vulnerabilities named PHP2Shell allow remote code execution on servers running PHP.

Government websites and public network services in countries like France, Finland, and the Netherlands were temporarily taken offline or placed into maintenance as a precautionary measure.

Authorities urged organizations to immediately inventory systems, apply latest security patches, monitor for unauthorized command shells, or isolate vulnerable servers from public networks.