---
title: "Two critical vulnerabilities have been confirmed in PHP, distributed under the name PHP2Shell, and… — Turan Security Xavfsizlik Byulleteni — DecisionGateway"
description: "allegation by Turan Security Xavfsizlik Byulleteni, recorded recently — verbatim quote and source citation."
canonical_url: "https://dgw.tmarket.io/claims/01a1d0d8-4f7e-7f61-9b39-dc67254ccaa9"
meta:
  "og:description": "allegation by Turan Security Xavfsizlik Byulleteni, recorded recently — verbatim quote and source citation."
  "og:image": "https://dgw.tmarket.io/og.jpg"
  "og:image:alt": "White network of connected nodes crossed by a timeline on black"
  "og:image:height": "1024"
  "og:image:width": "1024"
  "og:title": "Two critical vulnerabilities have been confirmed in PHP, distributed under the name PHP2Shell, and… — Turan Security Xavfsizlik Byulleteni — DecisionGateway"
  "twitter:image": "https://dgw.tmarket.io/og.jpg"
---

> Index of every page on this site: [llms.txt](https://dgw.tmarket.io/llms.txt)

allegation

# **Two critical vulnerabilities have been confirmed in PHP, distributed under the name PHP2Shell, and they create a risk of remote malicious code execution on the server and unauthorized access to data.**

A allegation by Turan Security Xavfsizlik Byulleteni. Statements are as reported by the cited publishers — not verified by DecisionGateway.

> *PHP’da ikkita kritik zaiflik tasdiqlandi. PHP2Shell nomi bilan tarqalayotgan ushbu zaifliklar serverda masofadan zararli kod bajarish va ma’lumotlarga ruxsatsiz kirish xavfini tug‘diradi.*

turansecurityPublished 2026-10-21 [ Read source](https://t.me/turansecurity/678)

## **Related claims**

[**Two security flaws in PHP could allow attackers to execute malicious code remotely.**THnewsupdates · allegation](https://dgw.tmarket.io/claims/01a1c5f7-f8f6-7de9-b19f-984be67d401d) [**The vulnerability can cause memory corruption, service disruption, and in some cases remote execution of malicious code via specially crafted compressed data.**Turan Security Xavfsizlik Byulleteni · statement](https://dgw.tmarket.io/claims/01a1d0d9-f01c-7fd0-8e8d-a76f51a82df0) [**Turan Security calls on organizations to check their PHP systems, strengthen monitoring and not delay security updates.**Turan Security · statement](https://dgw.tmarket.io/claims/01a1d0d8-5108-75f8-85b4-c410e405fae6) [**The vulnerability has a severity rating of Critical with a CVSS score of 10.0.**Turan Security xavfsizlik byulleteni · statement](https://dgw.tmarket.io/claims/01a1d0dd-4e15-77d2-a898-05aecdf1630f) [**Due to a serious vulnerability in the WordPress system and the REST API mechanism, an attacker can remotely break into the server without any additional information (such as login-password) (RCE).**turansecurity · statement](https://dgw.tmarket.io/claims/01a1d0d9-d3ce-7d65-8ce1-8f81d68f4df8) [**The vulnerability exists in WordPress 6.9.x (up to 6.9.5) and 7.0.x (up to 7.0.2) versions.**turansecurity · statement](https://dgw.tmarket.io/claims/01a1d0d9-d3ea-7563-9319-c2c3bae1c6dd)

[All claims](https://dgw.tmarket.io/claims)

```json
{"@context":"https://schema.org","@graph":[{"@id":"https://dgw.tmarket.io/#website","@type":"WebSite","description":"Decisions, events and falsifiable forecasts from 3,800+ Telegram channels — every claim cited. Read free.","name":"DecisionGateway","url":"https://dgw.tmarket.io/","publisher":{"@id":"https://dgw.tmarket.io/#identity"}},{"@id":"https://dgw.tmarket.io/claims/01a1d0d8-4f7e-7f61-9b39-dc67254ccaa9#webpage","@type":"WebPage","description":"allegation by Turan Security Xavfsizlik Byulleteni, recorded recently — verbatim quote and source citation.","name":"Two critical vulnerabilities have been confirmed in PHP, distributed under the name PHP2Shell, and… — Turan Security Xavfsizlik Byulleteni — DecisionGateway","url":"https://dgw.tmarket.io/claims/01a1d0d8-4f7e-7f61-9b39-dc67254ccaa9","breadcrumb":{"@id":"https://dgw.tmarket.io/claims/01a1d0d8-4f7e-7f61-9b39-dc67254ccaa9#breadcrumb"},"isPartOf":{"@id":"https://dgw.tmarket.io/#website"},"potentialAction":[{"@type":"ReadAction","target":["https://dgw.tmarket.io/claims/01a1d0d8-4f7e-7f61-9b39-dc67254ccaa9"]}]},{"@id":"https://dgw.tmarket.io/#identity","@type":"Organization","name":"DecisionGateway","url":"https://dgw.tmarket.io"},{"@id":"https://dgw.tmarket.io/claims/01a1d0d8-4f7e-7f61-9b39-dc67254ccaa9#breadcrumb","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","name":"Home","item":"https://dgw.tmarket.io","position":1},{"@type":"ListItem","name":"Claims","item":"https://dgw.tmarket.io/claims","position":2},{"@type":"ListItem","name":"Two critical vulnerabilities have been confirmed in PHP,…","position":3}]},{"@id":"https://dgw.tmarket.io/claims/01a1d0d8-4f7e-7f61-9b39-dc67254ccaa9#/schema/quotation/1","@type":"Quotation","dateCreated":"2026-10-21","isBasedOn":"https://t.me/turansecurity/678","text":"PHP’da ikkita kritik zaiflik tasdiqlandi. PHP2Shell nomi bilan tarqalayotgan ushbu zaifliklar serverda masofadan zararli kod bajarish va ma’lumotlarga ruxsatsiz kirish xavfini tug‘diradi.","url":"/claims/01a1d0d8-4f7e-7f61-9b39-dc67254ccaa9"}]}
```

## Sitemap

See the full [sitemap](https://dgw.tmarket.io/sitemap.md) for all pages.