Millions of attempts, zero confirmed breaches
Cloudflare CEO Matthew Prince said on X that millions of attempts to exploit the PHP2Shell vulnerability have been made since its disclosure on Wednesday. According to Prince, thousands of attempts were seen across Cloudflare's network in the 10 hours before the flaw was publicly announced.
Early assessments from officials
Officials in Germany, the Netherlands and Japan said they have not detected a successful intrusion so far. That suggests the flaw has not yet turned into a widespread breach despite the volume of attempts.
Why it matters
PHP2Shell is a critical remote code execution (RCE) flaw affecting PHP-based servers. The scale of exploit attempts indicates the vulnerability is being targeted by automated scanners and botnets. Site administrators should apply patches and monitor logs closely.
Open questions
Prince's figures cover only Cloudflare's own network. The global total of attempts and the number of affected systems remain unclear.
