# CISA confirms PHP2Shell vulnerabilities now exploited in attacks

> **Newsylist Open Intelligence Dossier** · First detected: 2026-10-28 13:29 UTC · Category: Business · Sources: 3 · Current Velocity: 1.3

## Key People, Organizations & Locations
CISA, PHP2Shell

## Multi-Source Evidence Table
| Source Outlet | Headline | Published (UTC) | Verification URL |
|---|---|---|---|
| Cloudflare Blog | Introducing the Cloudflare PHP Capture the Flag challenge | 2026-10-27 08:20 | [Source Link](https://news.google.com/rss/articles/CBMiS0FVX3lxTE5fdG9ZU1JaaXhhd1otVmZwcG5meXJGWVVwVG1raWIzazdnVzNNdFNReG1HSGhhWG9faDFTYkxvaXg4RFRMUVVrb19VRQ?oc=5) |
| Federal News Network | CISA gives agencies days to patch critical PHP bugs | 2026-10-27 08:20 | [Source Link](https://news.google.com/rss/articles/CBMiqAFBVV95cUxPWmFHVjNjcVhRZ2hOdWtmRlEydXJQQWhRWEFlTmJMTUxZU1V5TzExT012aGt2UEFyZGFJQXI2YTdKUjI2eDI5emFpNnVoRGE5OFp6RFUxZTZWU3FoY0J3QzJtSUl1cVhvNmRWbHZtdW91djkyQmpYWmNtd2VzZEpKM19VYkRmUWpuamxQcDktQzRPdkRnUmpNSm1sdHpUaWNLa2FZRmRteTU?oc=5) |
| BleepingComputer | CISA confirms PHP2Shell vulnerabilities now exploited in attacks | 2026-10-27 08:20 | [Source Link](https://news.google.com/rss/articles/CBMisgFBVV95cUxQU1JMQ1hydmZTdDJDYkMxLXBfUDdRU0RlSGhUWHA3Q2ZHRlAxM2VkdjNKWldXU2N5YVgxUU9VQlR0ampTbXBqWUU4TEV5eDBOWkV3U001cHRjdHNHRWozWVpiYlNtUUVsZXRDR2NYajkxSVY4VHdUN3BUOVc5czJmOTE2SmtsbFpKZXJfQVYxTlZkd0dzMDdJN1NNSUlXQlBHaERMNGs1UTgzUEdCa1lQWkx30gG3AUFVX3lxTE1SdlRkY0pfVWN2T3RiT1VrX1JCaUV5Q2tZX0M3Q3dsUDEwbFZjcnZJYVVXdGVzZzBlMmY0RzNwVFNfWUt4bDNPZEY0RnRLOW4yc0tWWWlSTmpxdjY5Sk8ySDdJS2x3MEFkN2RTV3cwNjgyalVNS2VQaTNuR1lPRG9XYmx3YjRpNmtyTHZld3lPMEhBNEhIRm5OSXFkajAxbFh) |

---
*Canonical Source: https://www.newsylist.com/trend/2026-10-28/cisa-confirms-php2shell-vulnerabilities-now-exploited-in-attacks*
*Synthesized by Newsylist Open Intelligence Engine under E-E-A-T journalistic standards.*