PHP flaw, day two: what we know now and what it means for your site
The 21 October PHP flaw is now called PHP2Shell. Is it being exploited, what is the memory leak, why is there no patch for PHP 8.1 and older, and what should you do today?
The 21 October PHP flaw is now called PHP2Shell. Is it being exploited, what is the memory leak, why is there no patch for PHP 8.1 and older, and what should you do today?
Two critical PHP flaws took websites offline worldwide on 21 October 2026. The websites we host stayed online all day, thanks to Verploy, our own maintenance platform.