Post by @parents4future@climatejustice.global

@parents4future@climatejustice.global 1 hr. ago

RE: https://mastodon.social/@pixelfed/117476883931690007

If you run any kind of PHP application on your server…

"…exploit tool PHP2Shell on webservers running WordPress 7.1.3, MediaWiki 1.46.2, phpBB 3.3.17, Magento 2.4.9, Joomla 6.2.0, Laravel 13.36.0, Laravel 8.83.29, Symphony 8.1.9, Drupal 11.4.10, and WHMCS 9.0.9, all of which use PHP."

#PHP2Shell

https://arstechnica.com/security/2026/10/php-maintainers-tell-web-devs-to-prepare-themselves-for-critical-security-patches/

Ars Technica

PHP maintainers tell Web devs to prepare themselves for critical security patches

Unconfirmed report claims PHP2Shell exploit remotely executes code on PHP sites.

pixelfed

@pixelfed@mastodon.social 2 hr. ago

Out of an abundance of caution, we are putting our services in maintenance mode until we update to the latest PHP version.

Affected services:
- https://pixelfed.social
- https://pixelfed.art
- https://pixelfed.org
- https://loops.video
- https://fedidb.com
- https://fedidb.org
- https://fediverse.info

#php2shell

1 Boost

0 Likes

No replies yet

Be the first to share your thoughts.