# Disastrous PHP vulnerabilities were exploited days before the patch

https://mins.news/en/item/111495

- The Verge, 2026-10-22 16:49 UTC
- Tech
- Original: https://www.theverge.com/tech/1016798/php-vulnerabilities-exploit-patch

> Amazon Threat Intelligence says hackers tried to exploit PHP flaws affecting websites days before a patch was released. Amazon’s team detected a PHP2Shell attempt on October 17 and several more on October 21, hours before the patch. The PHP Foundation says it knows of no successful remote code execution and is changing its processes to resolve complex vulnerabilities faster.

## Related coverage

- [Race to patch vulnerabilities across the web is underway](https://mins.news/en/video/112350) — DW News, 2026-10-23
- [Hackers had a four-day head start exploiting the PHP2Shell vulnerability](https://mins.news/en/item/111543) — Ars Technica, 2026-10-22
- [Hackers Exploited PHP Flaws Days Before Patches Arrived](https://mins.news/en/item/110432) — WIRED, 2026-10-22