Hackers got a four-day head start on epic PHP2Shell vulnerability

Hackers got a four-day head start on epic PHP2Shell vulnerability

Hackers were already probing the bug before defenders were told it existed.

arstechnica.com/security/2026/10/hackers-got-a-four-day-head-start-on-epic-php2shell-vulnerability/