Singapore's Cyber Security Agency has urged organizations to immediately update PHP software after two critical vulnerabilities were linked to widespread exploitation attempts, the agency said in an advisory on Thursday.
The flaws, collectively known as PHP2Shell, could allow attackers to execute code remotely on affected systems without authentication. CSA advised organizations to prioritize internet-facing systems and check web servers for PHP installations, including those used by third-party applications and components.
Organizations unable to install updates immediately should follow temporary mitigation guidance issued by PHP developers, CSA said. The agency also urged users and administrators to monitor official PHP guidance for further updates.
