Special Report: PHP2Shell puts 70% of web at risk
Cybersecurity Today

Special Report: PHP2Shell puts 70% of web at risk

B2中高级2026年10月21日12分钟
  • 科技

PHP2Shell: Emergency PHP RCE Patches, Leaks, and Early Exploitation (CVE-2026-109618/109619) In a special edition of Cybersecurity Today, host David Shipley covers emergency PHP patches for two critical unauthenticated remote code execution flaws, CVE-2026-109618 and CVE-2026-109619, affecting PHP 5.4+ and essentially all PHP deployments serving web requests across major stacks. He explains the shared root cause involving corrupted memory after abnormal request termination, outlines the fixed releases (PHP 8.5.12, 8.4.27, 8.3.36, 8.2.35), and notes no official updates for PHP 8.1 and older beyond limited source backports. Mitigations and Cloudflare WAF rules are described as partial, with patching urged...

播放本集

打开播放器:完整文字稿,每个单词都可点击,附翻译和单词卡。

试一试:点任意单词

来自本集开头的真实句子,每个单词都标出了难度级别。

第 7 句,共 12 句 · 0:23

Yesterday, the PHP security team shipped emergency patches for two critical remote code execution

.

tracked as CVE-2026-1096-18 and CVE-2026-109-619.

点一个单词,用你的语言查看释义。

这些单词你认识吗?

本集中 8 个较难的单词。点一个查看释义,然后标记一下。

标记几个单词,我们会告诉你这一集是否适合你的水平。

这一集适合你吗?

B2

B2 · 中高级

能看懂电视新闻就会觉得轻松

A1 25%A2 42%B1 23%B2 10%C1 0%
  • 90% 的单词在 B1 或更简单的水平。
  • 每分钟 130 词:自然语速。
  • 整集共有 78 个较难的单词(B2 及以上)。

文字稿

本集开头部分。完整文字稿在播放器中。

0:00

This is Cybersecurity Today for Thursday, October 22nd, 2026, and I'm your host, David Shipley. Let's get started. Welcome to a special edition of Cybersecurity Today.

0:13

The whole show today is about one story. Yesterday, the PHP security team shipped emergency patches for two critical remote code execution flaws in PHP itself. tracked as CVE-2026-1096-18 and CVE-2026-109-619.

0:37

PHP runs underneath summers between 70 and 80% of the websites whose server-side language is known. That includes WordPress, Drupal, Joomla, Magento, and L'Araval, among many others. PHP is the engine that powers much of the modern web.

以上是开头部分。 本集其余部分(11 分钟)在播放器中:每个单词都可点击,附翻译、生词收藏和单词卡。

在播放器中继续

由音频自动生成,可能存在错误。 音频版权归其发布者所有,并从其订阅源播放。版权所有者可申请删除 — 版权与删除政策