XFEDI

Conversation

ActivityPub

Remember that xkcd? Well, today is doomsday. Patch your PHP instances NOW. This is not a drill. https://www.php.net/archive/2026.php#2026-10-21-5 #PHP #php2shell

www.php.netPHP: News Archive - 2026PHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.

↩ Reply ♡ 0 · ↻ 0 ↗ Original

Oct 21, 2026 · 17:11 UTC

Replies

Natha@[email protected]

18h

↳ In reply to a post

If you can’t update right away and your website is at risk, @cloudflare can temporarily help. Please note that this is a band-aid on a bleeding wound. #PHP #php2shell

Screenshot of a tweet on X from Dane Knecht (CTO at Cloudflare): PHP sites behind Cloudflare already have an initial set of WAF rules deployed for the known exploit vectors in these vulnerabilities. The rules are available to all customers, including free. We are seeing early attacks emerging and are updating mitigations as new vectors show up. This is a STOPGAP only. Patch as soon as @ThePHPF releases the update at 14:00 UTC today.

↩ Reply ♡ 0 · ↻ 0 ↗ Original