WORLD WATCH · October 25, 2026 · NEWS
PHP2Shell affects 650 IPA URLs
CERT-AGID found 650 URLs in the Italian public administration index with a PHP version potentially vulnerable to PHP2Shell.
- Reported by
- Malware News
- Outlets reporting
- 1
- Category
- NEWS
- Newest report
- October 25, 2026
Plain-English brief. Written for readers who work in a second language.
Key takeaways
- 650 IPA URLs may allow PHP2Shell.
- 3.2 percent of reachable IPA addresses are affected.
- CERT-AGID conducted the first survey.
What happened
The report comes from Malware News. CERT-AGID conducted the first survey of web addresses listed in the Index of Public Administrations. That survey identified 650 URLs that declared a PHP version potentially vulnerable to PHP2Shell. Those URLs equal 3.2 percent of reachable addresses in that index.
Why it matters
A PHP version potentially vulnerable to PHP2Shell can allow exploitation on affected public administration URLs. Only a defined subset of reachable IPA addresses showed that declaration. No other scope for that vulnerability appeared in the source material.
What to do
- Verify the PHP version on each affected IPA URL.
- Restrict access to any affected PHP endpoint.
- Apply an available fix to each affected PHP installation.
SOURCE: INTEL128 WORLD WATCH (UPDATED OCT 25, 2026). This brief summarizes reporting by Malware News. Intel128 writes the summary and credits the outlet. Read the summary as a starting point, not as a substitute for the original reporting.