Cybersecurity articles tagged #PHP on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/php-php2shell-rce-threatens-web-applications-patch-nowhttps://runtimerebel.com/blog/php-php2shell-rce-threatens-web-applications-patch-nowTwo unauthenticated RCE flaws, dubbed 'php2shell', affect PHP versions since 5.4. This poses significant risk to popular web applications like WordPress and Drupal.Sun, 01 Nov 2026 20:05:06 GMTPHPRCEWordPressPhp2shellDrupalhttps://runtimerebel.com/blog/php-rce-flaws-cve-2026-109618-109619-actively-exploitedhttps://runtimerebel.com/blog/php-rce-flaws-cve-2026-109618-109619-actively-exploitedCritical remote code execution flaws in PHP (CVE-2026-109618, CVE-2026-109619) are under active, widespread exploitation, impacting millions of web properties.Sun, 01 Nov 2026 03:16:10 GMTPHPRemote Code ExecutionZero-DayCVE-2026-109618CVE-2026-109619https://runtimerebel.com/blog/github-actions-runners-weaponized-to-attack-cpanel-and-whm-servershttps://runtimerebel.com/blog/github-actions-runners-weaponized-to-attack-cpanel-and-whm-serversAttackers are leveraging GitHub Actions runners and compromised Packagist packages to launch distributed attacks against cPanel and WHM server instances.Thu, 23 Jul 2026 14:05:01 GMTGitHub ActionsPackagistcPanelWHMSupply Chain AttackPHPhttps://runtimerebel.com/blog/php-rce-via-cve-2024-4577-windows-argument-injection-analysishttps://runtimerebel.com/blog/php-rce-via-cve-2024-4577-windows-argument-injection-analysisTechnical analysis of the CVE-2024-4577 vulnerability affecting PHP on Windows. Learn how argument injection leads to RCE and how to secure PHP-CGI environments.Wed, 03 Jun 2026 05:44:55 GMTCVE-2024-4577PHPRCEWindowsArgument Injectionhttps://runtimerebel.com/blog/laravel-lang-php-packages-compromised-credential-stealer-alerthttps://runtimerebel.com/blog/laravel-lang-php-packages-compromised-credential-stealer-alertMultiple Laravel-Lang PHP packages have been compromised to deliver a cross-platform credential stealer. Learn how to detect and mitigate this supply chain threat.Sat, 23 May 2026 12:28:26 GMTLaravel LangPHPCredential StealerSupply Chain AttackComposerhttps://runtimerebel.com/blog/drupal-core-security-update-may-2026-critical-patch-advisoryhttps://runtimerebel.com/blog/drupal-core-security-update-may-2026-critical-patch-advisoryDrupal warns of an urgent core security update on May 20, 2026. Security teams must prepare for immediate patching to prevent exploit development.Tue, 19 May 2026 13:15:54 GMTDrupal CoreCMS SecurityPatch ManagementPHPhttps://runtimerebel.com/blog/php-8-1-end-of-life-security-risks-and-upgrade-path-analysishttps://runtimerebel.com/blog/php-8-1-end-of-life-security-risks-and-upgrade-path-analysisPHP 8.1 has reached its end-of-life status. Learn about the security implications of running unsupported software and the technical steps for remediation.Mon, 23 Mar 2026 04:48:54 GMTPHPEnd of LifeSoftware LifecycleWeb Securityhttps://runtimerebel.com/blog/malicious-laravel-packagist-packages-deploy-cross-platform-rathttps://runtimerebel.com/blog/malicious-laravel-packagist-packages-deploy-cross-platform-ratSecurity researchers discover malicious Laravel packages on Packagist delivering cross-platform RATs to Windows, macOS, and Linux systems. Audit your PHP dependencies.Wed, 04 Mar 2026 12:17:15 GMTPackagistLaravelPHPSupply Chain AttackRATNhattuanbl