Security Advisory

PHP2Shell Advisory

This advisory is relevant to all Samoan individuals, IT managers and organisations. This alert is intended to be understood by technical audiences.

TLP:CLEAR Critical Individuals Businesses IT Practitioners 23 Oct 2026

Advisory Details

SamCERT is advising all organisations operating PHP-based web applications and services to urgently assess and remediate two critical vulnerabilities collectively known as PHP2Shell. PHP is the programming language behind many of the world’s websites. Many government, business and community websites in Samoa run on PHP, either on their own servers or through a hosting provider.

Trusted Partners & International Network: