PHP2Shell vulnerabilities force web servers to update worldwide

TechnologyInternationalImpacto TICOct 21, 2026, 3:18 PM35 s readAI summary

Two PHP vulnerabilities known as PHP2Shell, disclosed on October 21, 2026, allow code execution on web servers without an account or password. The PHP development team released fixed versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35 and urged immediate installation. Governments in Europe, Asia and the United States asked users to update or disconnect systems. In Colombia, Colcert reported 8,699 PHP services exposed to the internet and issued a high-risk alert.

In 35 seconds

PHP2Shell groups two memory management flaws, CVE-2026-109618 and CVE-2026-109619, with a severity of 9.2 out of 10 on CVSS.
The fixed versions are 8.5.12, 8.4.27, 8.3.36 and 8.2.35; no alternative measure fully replaces the patch.
Colcert identified 8,699 PHP services exposed to the internet in Colombia; 7,659 are on internet service provider and telecom networks.

Read the full story at Impacto TIC

IASummary generated by artificial intelligence from a story by Impacto TIC. It may contain errors: the original source prevails.

PHP
ciberseguridad
vulnerabilidades
Colcert
servidores web

Comments

Be respectful. Comments reported by several people are hidden until a moderator reviews them.

You do not need an account to read, only to comment. Sign in with a code sent to your email or with your Google account. We only show the name you choose, never your email.

Keep reading

Dan Driscoll, former US Army secretary, joins OpenAI as senior national security advisor
OpenAI will bring on Dan Driscoll, former secretary of the US Army, as senior national security advisor, a newly created role. According to the company, his job will be to advise on how advanced AI can strengthen the national and cybersecurity of the United States and its allies. Driscoll resigned from the Army in September after reports of tensions with Defense Secretary Pete Hegseth. The appointment comes amid international concerns over the risks of advanced AI models.
TechnologyInternationalRevista SemanaNov 3AI
Emcali selected the consortium that will modernize more than 100,000 streetlights in Cali with LED technology
Cali will have 100% of its public lighting with LED technology through a COP 450,000 million project that includes modernizing 101,037 lights and installing 3,945 new points, with an 18-month execution period and operation and maintenance of up to 20 years. Emcali reported that three bidders submitted proposals and that works would begin with resources from the strategic partner, with disbursements only against effective execution. The model includes telemanagement, at an estimated COP 121,000 million, and would not require new debt for the city.
TechnologyColombiaBlu RadioNov 3AI
Cartagena Chamber of Commerce kicks off InnovaLatam 2026 with AI and leadership as core themes
The Cartagena Chamber of Commerce, iXcel Center, the Global Innovation Management Institute and Colsubsidio are organizing the seventh edition of InnovaLatam, which begins on Thursday, November 5, at the Hotel Estelar. The agenda is built around four pillars: Innovation 5.0 with artificial intelligence, Augmented Talent, Exponential Leadership and the Knowledge Triad. The event includes a free academic agenda, a commercial showcase of local business clusters and a Business Tour on November 6 with international delegations and investment funds.
TechnologyColombiaEl TiempoNov 3AI
Colombian election platform Comitium receives recognition in the United States
The organization Transparencia Electoral highlighted in Miami the development of Comitium, a platform created by LinkTIC and implemented by the National Electoral Council (CNE) to monitor the 2026 elections. The recognition was presented at the VI Transparencia Electoral Awards, within the framework of the US Electoral Program 2026, with more than 100 electoral authorities from 15 countries. Comitium managed more than 1.6 million accreditations of electoral witnesses, nearly 12,800 systems auditors and more than 40,000 national and international observers.
TechnologyColombiaBlu RadioNov 3AI

PHP2Shell vulnerabilities force web servers to update worldwide

In 35 seconds

Comments

Keep reading

Dan Driscoll, former US Army secretary, joins OpenAI as senior national security advisor

Emcali selected the consortium that will modernize more than 100,000 streetlights in Cali with LED technology

Cartagena Chamber of Commerce kicks off InnovaLatam 2026 with AI and leadership as core themes

Colombian election platform Comitium receives recognition in the United States