Unverified50% confidenceEventExact time
A chained exploit event collectively known as "PHP2Shell" has led to 25 servers being fully compromised.
1
Sources
50%
Confidence
Short-term (~14 days)
Relevance
10/29/2026
First Seen
Valid until: 11/12/2026
Sources
Related Entities
Related Claims
UnverifiedOn October 21, PHP released a patch fixing two high-severity vulnerabilities that allowed attackers to run code on servers without logging in; a large number of websites such as WordPress depend on the language.62% similarUnverifiedWiz Research's scan found that about 42% of exposed MCP servers returned real data when their tools were called, and some servers even exposed tools that could create or delete records.61% similarUnverifiedHTTP2Shell chains together HTTP/2 frame handling and Brotli decompression, amplifying the impact of a single-point defect.58% similarVerifiedThe HTTP 200 status code only indicates that the server successfully received and processed the request; it does not represent correct execution of business logic, as a large number of business errors can be wrapped inside a 200 response body.58% similarUnverifiedLinux内核包含超过2800万行代码，容器共享同一宿主内核，内核漏洞可能成为逃逸路径57% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1111077API
curl https://kongchang.com/api/v1/knowledge/claims/1111077MCP
get_claim(id=1111077)