Updated

Wiz's CTO discussed the PHP2Shell vulnerabilities in an interview published October 28, 2026, saying cleanup is far from over. Two critical bugs in PHP, used by roughly 70% of websites, forced some organizations to take sites offline until patches were applied. The CTO warned of a coming vulnpocalypse of more disclosed flaws.