https://infinityedgetech.com/blog Plain-English security alerts and engineering notes for business websites. en-us Sat, 24 Oct 2026 02:05:00 GMT https://infinityedgetech.com/blog/php2shell-php-vulnerability https://infinityedgetech.com/blog/php2shell-php-vulnerability Sat, 24 Oct 2026 02:05:00 GMT Security PHP2Shell is two critical flaws in PHP itself, fixed on October 21, 2026 in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. If a hosting company manages your server, it installs the fix, and most large hosts said they had by October 22. The sites at real risk run on a server you manage yourself, have nobody maintaining them, or use PHP 8.1 or older.