Vulnerability Management, PHP2Shell Is Under Attack: Why Updating Your CMS Is Not Enough PHP2Shell is under active exploitation, and updating your CMS may not be enough. Discover how these critical PHP flaws expose websites and network appliances to remote code execution, and learn what organizations should do to protect their systems.