# PHP2Shell remote code execution

**URL:** <https://forum.root.hr/t/php2shell-remote-code-execution/389>\
**Category:** Kibernetička sigurnost\
**Created:** [listopad 2026 19:47 21 UTC](https://forum.root.hr/t/php2shell-remote-code-execution/389 "2026-10-21T19:47:12Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![tinc2k](https://forum.root.hr/user_avatar/forum.root.hr/tinc2k/32/72_2.png) [@tinc2k](https://forum.root.hr/u/tinc2k)\
**Post date:** [listopad 2026 19:47 21 UTC](https://forum.root.hr/t/php2shell-remote-code-execution/389/1 "2026-10-21T19:47:12Z")

</div>

Jel krpate svoje PHP servere danas ekipa? 🙂

> **[PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the...](https://www.wiz.io/blog/php2shell-php-rce)**
>
> Core PHP engine flaws enable remote code execution and Heartbleed-style memory disclosure across the web.

---

<div class="post-metadata">

**Author:** ![Sakhill](https://forum.root.hr/letter_avatar_proxy/v4/letter/s/b2d939/32.png) [@Sakhill](https://forum.root.hr/u/Sakhill)\
**Post date:** [listopad 2026 21:15 21 UTC](https://forum.root.hr/t/php2shell-remote-code-execution/389/2 "2026-10-21T21:15:13Z")

</div>

Skrpano na 8.4.27 😃  
S napredovanjem ai-a i sve vecom sirom upotrebom, ja imam neki osjecaj da ce se ovo cesto dogadjati, jos kada nam stigne q day u banani smo, gasi internet motaj kablove.

---

<div class="post-metadata">

**Author:** ![STRiT](https://forum.root.hr/user_avatar/forum.root.hr/strit/32/643_2.png) [@STRiT](https://forum.root.hr/u/STRiT)\
**Post date:** [listopad 2026 22:43 21 UTC](https://forum.root.hr/t/php2shell-remote-code-execution/389/3 "2026-10-21T22:43:59Z")

</div>

Skrpano.  
8.5.12  
8.3.6

---

<div class="post-metadata">

**Author:** ![tinc2k](https://forum.root.hr/user_avatar/forum.root.hr/tinc2k/32/72_2.png) [@tinc2k](https://forum.root.hr/u/tinc2k)\
**Post date:** [listopad 2026 23:08 21 UTC](https://forum.root.hr/t/php2shell-remote-code-execution/389/4 "2026-10-21T23:08:52Z")

</div>

Puno frendova je danas u zescem grindu oko ovog.  
Ja propustam party jer nemam nista na PHP-u u produkciji ali imao sam posla oko drugih exploiteva ove godine, i isto mislim da ce samo bit sve zajebanije.  
Vjerujem da dosta velikih AI igraca ozbiljno radi na kriptografiji i da bi moglo bit vrlo gadno.

---

<div class="post-metadata">

**Author:** ![amar](https://forum.root.hr/user_avatar/forum.root.hr/amar/32/564_2.png) [@amar](https://forum.root.hr/u/amar)\
**Post date:** [listopad 2026 03:01 22 UTC](https://forum.root.hr/t/php2shell-remote-code-execution/389/5 "2026-10-22T03:01:42Z")

</div>

Evo upravo, čekao sam da CloudLinux izbaci svoje a do tad je Imunify360 blokirao execute.