CISA Adds PHP Flaws to KEV After Reported Successful Exploitation

CISA reportedly added PHP2Shell flaws to KEV on October 26, following reports of successful remote-code execution; PHP fixes were released October 21. Operators should check exposed Apache mod_php systems and patch, while verifying affected versions and avoiding unsupported claims about the scale of vulnerable websites.