PHP2Shell: Millions of Attacks, No Confirmed Successful Exploits Yet

Two critical unauthenticated remote code execution vulnerabilities in PHP are being actively scanned and attacked by millions of attempts, with researchers already developing ASLR bypasses that could pave the way for confirmed exploitation. The fact that no successful exploitation has been confirmed yet represents a narrow window of opportunity for defenders to patch before attackers refine their techniques. Organizations running vulnerable PHP installations on internet-facing servers face severe risk, as unauthenticated RCE can lead to full system compromise, data theft, and inclusion in botnets like Mirai. This incident underscores that active scanning and exploit development often precede mass exploitation by only days or weeks, making rapid patch deployment critical.