Report warns of actively exploited vulnerabilities in critical network infrastructure
PHP2Shell flaws pose risk to embedded management interfaces, researchers say
A report from Eclypsium's InfraTrust Pulse highlights 133 new security advisories across 18 vendors, with many vulnerabilities already under active exploitation. Among the most concerning are PHP2Shell flaws that allow unauthenticated remote code execution on network appliances such as firewalls, VPNs, and storage devices, whose embedded PHP cannot be patched by customers independently.