• TRM (USD/COP)COP 3,235.59 +1.65% +COP 52.60Colombia's official exchange rate (Financial Superintendence), valid Nov 4 to Nov 4
  • EuroCOP 3,617.08 +1.72% +COP 61.02Reference: TRM crossed with the European Central Bank rate of Nov 3; not the market quote
  • Mexican pesoCOP 173.98 +3.35% +COP 5.64Reference: TRM crossed with the European Central Bank rate of Nov 3; not the market quote
Quilla NewsFinance & Technology
ENES

Two critical unpatched PHP vulnerabilities put websites worldwide at risk

TechnologyInternationalRedesZone35 s readAI summary
Image: RedesZone

Two critical PHP vulnerabilities, known as PHP2Shell, were rated 9.2 out of 10 on the CVSS 4.0 scale by the PHP security team, dated October 20. The flaws, registered according to media as CVE-2026-109618 and CVE-2026-109619, would allow remote code execution on a server. Patches are expected on October 21 at 14:00 UTC and would reach supported branches, from PHP 8.2. According to Mallory, about 884,000 servers use PHP 8.1 or earlier.

In 35 seconds

  • PHP rated both flaws 9.2 out of 10 on CVSS 4.0 on October 20
  • Exploitation would allow remote code execution, credential theft or backdoors
  • Patches would arrive on October 21 at 14:00 UTC for branches from PHP 8.2
Read the full story at RedesZone

IASummary generated by artificial intelligence from a story by RedesZone. It may contain errors: the original source prevails.

Comments

Be respectful. Comments reported by several people are hidden until a moderator reviews them.

You do not need an account to read, only to comment. Sign in with a code sent to your email or with your Google account. We only show the name you choose, never your email.

    Keep reading