# Critical PHP vulnerabilities send organizations scrambling to secure their systems

> PHP security flaws force 70% of websites to patch systems amid active attacks.
- Title: Critical PHP vulnerabilities send organizations scrambling to…
- Summary: PHP security flaws force 70% of websites to patch systems amid active attacks. Critical PHP vulnerabilities affect up to 70% of websites, prompting immediate…
- Keywords: php, critical vulnerabilities, security patches, cloudflare, fastly, php2shell, cybersecurity, technology, enterprise, Critical, vulnerabilities, send
- Source: SiliconANGLE — https://siliconangle.com/2026/10/21/critical-php-vulnerabilities-send-organizations-scrambling-to-secure-their-systems
- Author: Maria Deutscher
- Published: 2026-10-21T20:22:48+00:00
- Read time: 1 min
- Topics: php, critical vulnerabilities, security patches, cloudflare, fastly, php2shell, cybersecurity, technology, enterprise
## PHP security patches released
PHP maintainers released patches for two critical vulnerabilities affecting up to 70% of websites.
## Cybersecurity agencies urge shutdown
National Security Agency and other agencies advise organizations to shut down affected systems while implementing updates.
## Active exploitation attempts
Cloudflare and Fastly report hackers are already trying to exploit the PHP2Shell vulnerabilities.
## Fastly's security alert
Fastly Chief Product Officer Kelly Shortridge states the vulnerability is not theoretical and shows active attacks.
## PHP2Shell technical details
PHP2Shell exploits allow hackers to deploy malicious code on vulnerable servers within seconds.
## Historical vulnerability issue
PHP2Shell has been present in PHP for decades but researchers believed it couldn't be exploited until August.
## Industry response timeline
Security firms formed an industry group that produced over 10,000 lines of code and fixes across 20 PHP files.
## Patch leak and rushed release
The vulnerability was leaked on a developer forum, leading PHP maintainers to rush out fixes today.
## Key takeaway

Critical PHP vulnerabilities affect up to 70% of websites, prompting immediate security patches and active exploitation attempts.