GoKawiilEclypsium report finds active exploitation of PHP flaws in network appliances
Eclypsium's October InfraTrust Pulse report tracked 133 new security advisories across 18 vendors between September 18 and October 14, covering 2,813 vulnerabilities, with 37 rated critical and 58 exploitable remotely without authentication. The report highlights so-called PHP2Shell flaws affecting PHP code embedded in the web management interfaces of firewalls, VPNs, application delivery controllers, and other appliances, noting that 16 advisories involved vulnerabilities already listed in CISA's Known Exploited Vulnerabilities catalog.