Cloudflare CEO reports millions of PHP exploit attempts tied to PHP2Shell flaw
Cloudflare CEO Matthew Prince said the network saw millions of exploit attempts against a PHP vulnerability, including thousands before public disclosure, according to Cointelegraph and The Defiant. The Defiant reported that PHP has shipped fixes for four supported branches and that the flaws can let attackers run code on vulnerable web servers without logging in.
Why “Unverified”
- 2 independent sources (The Defiant, Cointelegraph), but no primary confirmation
2 independent source groups across 2 posts · evidence score 75/100. How labels work
Other reports on this event
Its sources described the event in different words, so it was kept as a separate story with its own label. How reports are linked
What the sources claim
-
Cloudflare's CEO reported millions of exploit attempts against the PHP flaw.
“Cloudflare CEO Reports Millions of PHP2Shell Exploit Attempts”
The Defiant -
PHP has released fixes for four supported branches.
“PHP has shipped fixes for four supported branches.”
The Defiant -
The flaws allow attackers to run code on vulnerable web servers without logging in.
“The flaws can let attackers run code on vulnerable web servers without logging in.”
The Defiant -
Cloudflare's Matthew Prince said the network saw thousands of exploit attempts before the PHP vulnerability was publicly disclosed.
“saw thousands of exploit attempts even before the PHP vulnerability was publicly disclosed”
Cointelegraph
Sources
More in Hacks & Security
Summary and claims extracted by AI with prompt analyze-story@5 on 2026-10-22 09:20 UTC. Labels are computed from the sources, not by the model.