Published: October 21, 2026 Category: Cybersecurity | PHP | Web Application Security Introduction A critical security alert has been issued for PHP following the announcement of two severe vulnerabilities reportedly capable of allowing attackers to execute malicious code on vulnerable servers. The PHP development team has announced a security release to address the issues, with both vulnerabilities reportedly rated 9.2 out of 10 under CVSS v4.0. The vulnerabilities, referred to as PHP2Shell in security reporting, are relevant to website owners, hosting providers, application developers, and organizations running PHP-powered applications. PHP powers websites, content management systems, e-commerce platforms, and business applications. A vulnerability in the PHP runtime can therefore affect a wide range of internet-facing systems. Official announcement: PHP Security Announcement — October 2026 What Is the PHP2Shell Vulnerability? PHP2Shell is the name used in security report...
Hermes was the Greek god of communication and the messenger of the gods. I thought the name was fitting for a blog where I can share ideas, observations and experiences. Hermes Writings is a mixed collection of things close to my work and heart — technology, business, software, people, life and anything else I feel is worth writing about.