{"id":65104,"date":"2026-10-24T16:25:27","date_gmt":"2026-10-24T15:25:27","guid":{"rendered":"https:\/\/hlrnet.com\/technoblog\/inicio\/?p=65104"},"modified":"2026-10-24T16:25:27","modified_gmt":"2026-10-24T15:25:27","slug":"php2shell-critical-php-flaw","status":"publish","type":"post","link":"https:\/\/hlrnet.com\/technoblog\/inicio\/php2shell-critical-php-flaw\/","title":{"rendered":"PHP2Shell: Critical PHP flaw"},"content":{"rendered":"<p>Critical PHP Security Update: Two RCE Flaws (CVE-2026-109618, CVE-2026-109619)<\/p>\n<blockquote class=\"wp-embedded-content\" data-secret=\"KqPBiXYJda\"><p><a href=\"https:\/\/blog.sucuri.net\/2026\/10\/critical-php-security-update-two-rce-flaws-cve-2026-109618-cve-2026-109619.html\">Critical PHP Security Update: Two RCE Flaws (CVE-2026-109618, CVE-2026-109619)<\/a><\/p><\/blockquote>\n<p><iframe loading=\"lazy\" class=\"wp-embedded-content\" sandbox=\"allow-scripts\" security=\"restricted\" style=\"position: absolute; visibility: hidden;\" title=\"\u201cCritical PHP Security Update: Two RCE Flaws (CVE-2026-109618, CVE-2026-109619)\u201d \u2014 Sucuri Blog\" src=\"https:\/\/blog.sucuri.net\/2026\/10\/critical-php-security-update-two-rce-flaws-cve-2026-109618-cve-2026-109619.html\/embed#?secret=O4awVe8CyK#?secret=KqPBiXYJda\" data-secret=\"KqPBiXYJda\" width=\"600\" height=\"338\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\"><\/iframe><\/p>\n<p>PHP ha sido la brecha, Cloudflare ha sido el escudo que ha protegido al otro 40% de internet de caer<br \/>\nUna vulnerabilidad de PHP permit\u00eda ciberataques capaces de ejecutar c\u00f3digo malicioso en los servidores sin necesitar ninguna autenticaci\u00f3n<br \/>\nCloudflare despleg\u00f3 un escudo que ha bloqueado las peticiones sospechosas incluso antes de la publicaci\u00f3n del parche protegiendo al 40% de internet<br \/>\n<a href=\"https:\/\/www.xataka.com\/seguridad\/php-ha-sido-brecha-cloudflare-ha-sido-escudo-que-ha-protegido-al-otro-40-internet-caer\" rel=\"nofollow\">https:\/\/www.xataka.com\/seguridad\/php-ha-sido-brecha-cloudflare-ha-sido-escudo-que-ha-protegido-al-otro-40-internet-caer<\/a><\/p>\n<p>Lo que ha sucedido con PHP nos avisa: tenemos un problema grave con el software antiguo que sostiene internet<br \/>\nLa seguridad de internet nos exige mantener y revisar tecnolog\u00edas que llevan d\u00e9cadas en funcionamiento<br \/>\nEl mantenimiento del software antiguo es un problema estructural que no afecta solo a internet; tambi\u00e9n se enfrentan a \u00e9l empresas de todo tipo<br \/>\n<a href=\"https:\/\/www.xataka.com\/servicios\/que-ha-sucedido-php-nos-avisa-tenemos-problema-grave-software-antiguo-que-sostiene-internet\" rel=\"nofollow\">https:\/\/www.xataka.com\/servicios\/que-ha-sucedido-php-nos-avisa-tenemos-problema-grave-software-antiguo-que-sostiene-internet<\/a><\/p>\n<p>PHP2Shell es una vulnerabilidad cr\u00edtica para tu web: c\u00f3mo comprobar que tu sitio es seguro<br \/>\n<a href=\"https:\/\/www.xataka.com\/seguridad\/php2shell-vulnerabilidad-critica-para-tu-web-como-comprobar-que-tu-sitio-seguro\" rel=\"nofollow\">https:\/\/www.xataka.com\/seguridad\/php2shell-vulnerabilidad-critica-para-tu-web-como-comprobar-que-tu-sitio-seguro<\/a><\/p>\n<p>Cloudflare saw millions of php2shell attacks, and its new WAF defense is free for everyone<br \/>\n<a href=\"https:\/\/www.makeuseof.com\/cloudflare-stopped-millions-of-php2shell-attacks-and-turned-on-a-new-free-waf-for-everyone\/\" rel=\"nofollow\">https:\/\/www.makeuseof.com\/cloudflare-stopped-millions-of-php2shell-attacks-and-turned-on-a-new-free-waf-for-everyone\/<\/a><\/p>\n<p>PHP2Shell puts dozens of UK government services out of service<br \/>\n<a href=\"https:\/\/www.theregister.com\/security\/2026\/10\/22\/php2shell-puts-dozens-of-uk-government-services-out-of-service\/5304840\" rel=\"nofollow\">https:\/\/www.theregister.com\/security\/2026\/10\/22\/php2shell-puts-dozens-of-uk-government-services-out-of-service\/5304840<\/a><\/p>\n<p>Los fallos cr\u00edticos de PHP acaban de hacerse p\u00fablicos. Lo misterioso es que alguien ya intentaba explotarlos cuatro d\u00edas antes<br \/>\n<a href=\"https:\/\/www.xataka.com\/seguridad\/fallos-criticos-php-acaban-hacerse-publicos-misterioso-que-alguien-intentaba-explotarlos-cuatro-dias-antes\" rel=\"nofollow\">https:\/\/www.xataka.com\/seguridad\/fallos-criticos-php-acaban-hacerse-publicos-misterioso-que-alguien-intentaba-explotarlos-cuatro-dias-antes<\/a><br \/>\nAmazon detect\u00f3 un intento de explotar PHP2Shell cuatro d\u00edas antes de su divulgaci\u00f3n p\u00fablica<br \/>\nLas filtraciones conocidas llegaron despu\u00e9s y no explican qui\u00e9n estaba prob\u00e1ndolos el 17 de octubre<\/p>\n<p>PHP2Shell exploit bypasses protections designed to stop remote code execution<br \/>\n\u201cAdversaries are clearly spending time (and tokens) on this bug,\u201d researcher says.<br \/>\n<a href=\"https:\/\/www.theregister.com\/security\/2026\/10\/22\/php2shell-exploit-bypasses-protections-designed-to-stop-remote-code-execution\/5304883\" rel=\"nofollow\">https:\/\/www.theregister.com\/security\/2026\/10\/22\/php2shell-exploit-bypasses-protections-designed-to-stop-remote-code-execution\/5304883<\/a><\/p>\n<p>Deux failles critiques dans PHP : les entreprises sous pression &#8211; Le Monde Informatique<br \/>\n<a href=\"https:\/\/www.lemondeinformatique.fr\/actualites\/lire-deux-failles-critiques-dans-php-les-entreprises-sous-pression-100866.html\" rel=\"nofollow\">https:\/\/www.lemondeinformatique.fr\/actualites\/lire-deux-failles-critiques-dans-php-les-entreprises-sous-pression-100866.html<\/a><\/p>\n<p>PHP2Shell exploit bypasses protections designed to stop remote code execution<br \/>\n<a href=\"https:\/\/www.theregister.com\/security\/2026\/10\/22\/php2shell-exploit-bypasses-protections-designed-to-stop-remote-code-execution\/5304883\" rel=\"nofollow\">https:\/\/www.theregister.com\/security\/2026\/10\/22\/php2shell-exploit-bypasses-protections-designed-to-stop-remote-code-execution\/5304883<\/a><\/p>\n<p>Critical PHP Flaws Found: How to Protect Your WordPress Site<br \/>\n<a href=\"https:\/\/www.wpbeginner.com\/news\/critical-php-flaws-found-how-to-protect-your-wordpress-site\/\" rel=\"nofollow\">https:\/\/www.wpbeginner.com\/news\/critical-php-flaws-found-how-to-protect-your-wordpress-site\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Critical PHP Security Update: Two RCE Flaws (CVE-2026-109618, CVE-2026-109619) Critical PHP Security Update: Two RCE Flaws (CVE-2026-109618, CVE-2026-109619) PHP ha sido la brecha, Cloudflare ha sido el escudo que ha protegido al otro 40% de internet de caer Una vulnerabilidad de PHP permit\u00eda ciberataques capaces de ejecutar c\u00f3digo malicioso en<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"iawp_total_views":0,"footnotes":""},"categories":[32],"tags":[417],"class_list":["post-65104","post","type-post","status-publish","format-standard","hentry","category-security","tag-php"],"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/hlrnet.com\/technoblog\/inicio\/wp-json\/wp\/v2\/posts\/65104","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hlrnet.com\/technoblog\/inicio\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hlrnet.com\/technoblog\/inicio\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hlrnet.com\/technoblog\/inicio\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/hlrnet.com\/technoblog\/inicio\/wp-json\/wp\/v2\/comments?post=65104"}],"version-history":[{"count":1,"href":"https:\/\/hlrnet.com\/technoblog\/inicio\/wp-json\/wp\/v2\/posts\/65104\/revisions"}],"predecessor-version":[{"id":65105,"href":"https:\/\/hlrnet.com\/technoblog\/inicio\/wp-json\/wp\/v2\/posts\/65104\/revisions\/65105"}],"wp:attachment":[{"href":"https:\/\/hlrnet.com\/technoblog\/inicio\/wp-json\/wp\/v2\/media?parent=65104"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hlrnet.com\/technoblog\/inicio\/wp-json\/wp\/v2\/categories?post=65104"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hlrnet.com\/technoblog\/inicio\/wp-json\/wp\/v2\/tags?post=65104"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}