Vercel Developers(@vercel_dev):php2shell Security Advisory: two critical RCE flaws in the PHP engine affect PHP 5.4+. Public exploits are out. Vercel WAF rules were shipped before disclosure and have been blocking known exploit patterns. Patch PHP to 8.2.35, 8.3.36, 8.4.27, or 8.5.12.

Vercel Developers

@vercel_dev

For developers building on @vercel.

Joined November 2020

5 Following 49.6K Followers

Vercel Developers@vercel_dev

2026.10.21 19:23

php2shell Security Advisory: two critical RCE flaws in the PHP engine affect PHP 5.4+. Public exploits are out. Vercel WAF rules were shipped before disclosure and have been blocking known exploit patterns. Patch PHP to 8.2.35, 8.3.36, 8.4.27, or 8.5.12.