Skip to main content
4 reportsPriority High

The PHP2Shell disclosure

A new vulnerability, CVE-2026-85102, has been reported with a high likelihood of exploitation, prompting organisations to review their security measures. Additional vulnerabilities have also been identified, highlighting ongoing security concerns.

First report Latest

What is going on

  • CVE-2026-85102 was reported with a high estimated chance of exploitation in the next 30 days.
  • CISA added two new vulnerabilities to its known-exploited catalogue due to evidence of active exploitation.
  • A stable channel update for desktop was released with version 157.0.8103.50/.51 for Windows and Mac, and 157.0.8103.50 for Linux.

Reports in this story

Newest first. Each one is a separate event with its own sources and evidence.

Back to the feed