{"id":62951,"date":"2026-10-22T11:55:01","date_gmt":"2026-10-22T10:55:01","guid":{"rendered":"https:\/\/alground.com\/site\/?p=62951"},"modified":"2026-10-22T11:55:01","modified_gmt":"2026-10-22T10:55:01","slug":"php2shell-falle-critiche-php","status":"publish","type":"post","link":"https:\/\/alground.com\/site\/php2shell-falle-critiche-php\/62951\/","title":{"rendered":"PHP2Shell, due falle critiche in PHP: milioni di attacchi e portali pubblici spenti"},"content":{"rendered":"\n\n<style>\n.alground-php2shell{\n  --ink:#01437f;\n  --soft:#4a7ba3;\n  --paper:#f3efe4;\n  --card:#fbf9f3;\n  --red:#8c2f39;\n  --gold:#a9843c;\n  --text:#241f19;\n  --muted:#5c5346;\n  --line:rgba(1,67,127,.16);\n  box-sizing:border-box;\n  max-width:760px;\n  margin:0 auto;\n  padding:2.2rem 1.5rem 3rem;\n  background:var(--paper);\n  color:var(--text);\n  font-family:-apple-system,BlinkMacSystemFont,\"Segoe UI\",Roboto,Helvetica,Arial,sans-serif;\n  line-height:1.5\n}\n.alground-php2shell *{box-sizing:border-box}\n.alground-php2shell .lede{\n  font-family:Georgia,\"Iowan Old Style\",\"Times New Roman\",serif;\n  font-size:1.18rem;\n  line-height:1.65;\n  border-left:3px solid var(--gold);\n  padding-left:1.1rem;\n  margin:0 0 1.8rem\n}\n.alground-php2shell .istruzioni{\n  font-size:.88rem;\n  color:var(--muted);\n  font-style:italic;\n  margin:0 0 .9rem\n}\n.alground-php2shell .progresso{\n  display:flex;\n  align-items:center;\n  gap:.6rem;\n  margin:0 0 1.8rem;\n  flex-wrap:wrap\n}\n.alground-php2shell .progresso-punti{display:flex;gap:6px}\n.alground-php2shell .punto{\n  width:9px;\n  height:9px;\n  border-radius:50%;\n  border:1.5px solid var(--soft);\n  background:transparent;\n  transition:.25s\n}\n.alground-php2shell .punto.fatto{background:var(--gold);border-color:var(--gold)}\n.alground-php2shell .progresso-testo{font-size:.82rem;color:var(--muted)}\n.alground-php2shell .schede{display:flex;flex-direction:column;gap:.6rem}\n.alground-php2shell .scheda{\n  border:1px solid var(--line);\n  background:var(--card);\n  border-radius:3px;\n  overflow:hidden\n}\n.alground-php2shell .scheda-header{\n  width:100%;\n  display:flex;\n  align-items:center;\n  gap:.9rem;\n  background:transparent;\n  border:0;\n  text-align:left;\n  padding:.95rem 1.1rem;\n  cursor:pointer;\n  font-family:inherit;\n  color:var(--text)\n}\n.alground-php2shell .scheda-header:hover{background:rgba(1,67,127,.04)}\n.alground-php2shell .scheda-header:focus-visible{outline:2px solid var(--gold);outline-offset:-2px}\n.alground-php2shell .tag{\n  flex-shrink:0;\n  font-size:.72rem;\n  font-weight:600;\n  color:var(--soft);\n  background:rgba(74,123,163,.12);\n  padding:.3rem .55rem;\n  border-radius:2px;\n  white-space:nowrap\n}\n.alground-php2shell .titolo-scheda{flex:1;font-size:1rem;font-weight:600}\n.alground-php2shell .segno{\n  flex-shrink:0;\n  font-size:1.3rem;\n  color:var(--gold);\n  transition:transform .3s;\n  line-height:1\n}\n.alground-php2shell .scheda-header[aria-expanded=\"true\"] .segno{transform:rotate(45deg)}\n.alground-php2shell .scheda-panel{\n  display:grid;\n  grid-template-rows:0fr;\n  transition:grid-template-rows .35s\n}\n.alground-php2shell .scheda[data-open=\"true\"] .scheda-panel{grid-template-rows:1fr}\n.alground-php2shell .scheda-panel-inner{overflow:hidden}\n.alground-php2shell .scheda-contenuto{\n  padding:.95rem 1.1rem 1.15rem;\n  font-size:.97rem;\n  line-height:1.65;\n  border-top:1px solid var(--line)\n}\n.alground-php2shell .scheda-contenuto p{margin:0 0 .8rem}\n.alground-php2shell .scheda-contenuto p:last-child{margin-bottom:0}\n.alground-php2shell .timbro{\n  float:right;\n  margin:0 0 .6rem 1rem;\n  border:2px solid var(--red);\n  border-radius:4px;\n  padding:.35rem .55rem;\n  color:var(--red);\n  font-size:.68rem;\n  font-weight:700;\n  letter-spacing:.03em;\n  text-align:center;\n  transform:rotate(-6deg);\n  line-height:1.3\n}\n.alground-php2shell .footer-nota{\n  margin-top:2.2rem;\n  padding-top:1.3rem;\n  border-top:1px solid var(--line);\n  display:flex;\n  gap:.7rem\n}\n.alground-php2shell .puntino{\n  flex-shrink:0;\n  width:8px;\n  height:8px;\n  border-radius:50%;\n  background:var(--red);\n  margin-top:.45rem\n}\n.alground-php2shell .footer-nota p{\n  font-size:.87rem;\n  color:var(--muted);\n  margin:0;\n  line-height:1.55\n}\n@media(max-width:520px){\n  .alground-php2shell{padding:1.4rem .8rem 2rem}\n  .alground-php2shell .lede{font-size:1.05rem}\n  .alground-php2shell .scheda-header{align-items:flex-start;gap:.55rem;flex-wrap:wrap}\n  .alground-php2shell .titolo-scheda{flex-basis:70%}\n  .alground-php2shell .timbro{float:none;display:inline-block;margin:0 0 .7rem}\n}\n@media(prefers-reduced-motion:reduce){\n  .alground-php2shell *{animation:none!important;transition:none!important}\n}\n<\/style>\n\n<article class=\"alground-php2shell\" id=\"alground-php2shell\">\n\n<p class=\"lede\">Due falle critiche in PHP, il linguaggio dietro buona parte dei siti web, sono state corrette il 21 ottobre. In poche ore gli attacchi sono saliti a milioni e diversi governi europei hanno spento i propri portali. La domanda vera \u00e8 chi arriva prima: chi aggiorna o chi sfrutta la falla.<\/p>\n\n<p class=\"istruzioni\">Le schede vanno dalla falla tecnica alle verifiche da fare subito su un sito in PHP.<\/p>\n\n<div class=\"progresso\">\n  <div class=\"progresso-punti\" id=\"punti-php\"><\/div>\n  <span class=\"progresso-testo\" id=\"testo-php\"><\/span>\n<\/div>\n\n<div class=\"schede\">\n\n<section class=\"scheda\" data-open=\"false\">\n<button class=\"scheda-header\" aria-expanded=\"false\" aria-controls=\"php-panel-1\" id=\"php-header-1\">\n  <span class=\"tag\">I fatti<\/span>\n  <span class=\"titolo-scheda\">Cosa \u00e8 stato corretto il 21 ottobre<\/span>\n  <span class=\"segno\" aria-hidden=\"true\">+<\/span>\n<\/button>\n<div class=\"scheda-panel\" id=\"php-panel-1\" role=\"region\" aria-labelledby=\"php-header-1\">\n<div class=\"scheda-panel-inner\">\n<div class=\"scheda-contenuto\">\n<p>Il 21 ottobre il progetto PHP ha rilasciato le versioni 8.5.12, 8.4.27, 8.3.36 e 8.2.35. Correggono le vulnerabilit\u00e0 CVE-2026-109618 e CVE-2026-109619, ribattezzate PHP2Shell.<\/p>\n<p>Il Csirt Italia le classifica come critiche, con punteggio 9,2 su 10. Permettono a un attaccante non autenticato di eseguire codice sul server con richieste costruite ad arte.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n\n<section class=\"scheda\" data-open=\"false\">\n<button class=\"scheda-header\" aria-expanded=\"false\" aria-controls=\"php-panel-2\" id=\"php-header-2\">\n  <span class=\"tag\">Come funziona<\/span>\n  <span class=\"titolo-scheda\">Un errore di memoria vecchio di anni<\/span>\n  <span class=\"segno\" aria-hidden=\"true\">+<\/span>\n<\/button>\n<div class=\"scheda-panel\" id=\"php-panel-2\" role=\"region\" aria-labelledby=\"php-header-2\">\n<div class=\"scheda-panel-inner\">\n<div class=\"scheda-contenuto\">\n<p>Secondo la ricostruzione di Decrypt, il primo difetto nasce quando PHP esaurisce la memoria a met\u00e0 richiesta. Poi tratta come completi dati rimasti a met\u00e0.<\/p>\n<p>Il secondo lascia in memoria residui della richiesta di un visitatore, che una richiesta successiva pu\u00f2 sfruttare. I server pi\u00f9 esposti sono quelli Apache con mod_php. L\u00ec l&#8217;attacco parte prima ancora del codice del sito.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n\n<section class=\"scheda\" data-open=\"false\">\n<button class=\"scheda-header\" aria-expanded=\"false\" aria-controls=\"php-panel-3\" id=\"php-header-3\">\n  <span class=\"tag\">La corsa<\/span>\n  <span class=\"titolo-scheda\">Milioni di tentativi e portali pubblici spenti<\/span>\n  <span class=\"segno\" aria-hidden=\"true\">+<\/span>\n<\/button>\n<div class=\"scheda-panel\" id=\"php-panel-3\" role=\"region\" aria-labelledby=\"php-header-3\">\n<div class=\"scheda-panel-inner\">\n<div class=\"scheda-contenuto\">\n<p>Il ceo di Cloudflare, Matthew Prince, ha contato migliaia di tentativi nelle dieci ore prima dell&#8217;annuncio. Dopo la pubblicazione erano diventati milioni.<\/p>\n<p>Diverse amministrazioni hanno spento i siti per precauzione. Tra queste il parlamento e l&#8217;agenzia cyber dei Paesi Bassi, l&#8217;agenzia informatica finlandese Valtori e alcune prefetture francesi. In Giappone sono stati sospesi anche servizi del ministero delle Finanze.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n\n<section class=\"scheda\" data-open=\"false\">\n<button class=\"scheda-header\" aria-expanded=\"false\" aria-controls=\"php-panel-4\" id=\"php-header-4\">\n  <span class=\"tag\">Il ruolo dell&#8217;IA<\/span>\n  <span class=\"titolo-scheda\">Trovata da un&#8217;intelligenza artificiale, sfruttabile da un&#8217;altra<\/span>\n  <span class=\"segno\" aria-hidden=\"true\">+<\/span>\n<\/button>\n<div class=\"scheda-panel\" id=\"php-panel-4\" role=\"region\" aria-labelledby=\"php-header-4\">\n<div class=\"scheda-panel-inner\">\n<div class=\"scheda-contenuto\">\n<p>Secondo Fortune, il primo difetto \u00e8 stato individuato ad agosto dalla societ\u00e0 Calif con il modello GPT-5.6 Sol di OpenAI. Wiz lo ha trovato in modo indipendente, sempre con strumenti di IA.<\/p>\n<p>OpenAI presenta il caso come un successo difensivo della sua iniziativa Patch the Planet. Ma la stessa azienda avverte che queste capacit\u00e0 aiutano anche chi attacca. Gli attacchi, del resto, sono iniziati prima che la patch fosse pubblica.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n\n<section class=\"scheda\" data-open=\"false\">\n<button class=\"scheda-header\" aria-expanded=\"false\" aria-controls=\"php-panel-5\" id=\"php-header-5\">\n  <span class=\"tag\">Il dettaglio<\/span>\n  <span class=\"titolo-scheda\">I server che non riceveranno mai la patch<\/span>\n  <span class=\"segno\" aria-hidden=\"true\">+<\/span>\n<\/button>\n<div class=\"scheda-panel\" id=\"php-panel-5\" role=\"region\" aria-labelledby=\"php-header-5\">\n<div class=\"scheda-panel-inner\">\n<div class=\"scheda-contenuto\">\n<span class=\"timbro\">FUORI<br>SUPPORTO<\/span>\n<p>Per PHP 8.1 e versioni precedenti non arriver\u00e0 nessun aggiornamento ufficiale: sono fuori supporto. Il progetto ha pubblicato solo correzioni del codice sorgente, da applicare a mano.<\/p>\n<p>Secondo la societ\u00e0 di analisi Mallory, il 20 ottobre erano circa 884.000 i server esposti con PHP 8.1 o precedenti. \u00c8 la parte del problema che non si chiude con un clic.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n\n<section class=\"scheda\" data-open=\"false\">\n<button class=\"scheda-header\" aria-expanded=\"false\" aria-controls=\"php-panel-6\" id=\"php-header-6\">\n  <span class=\"tag\">Da verificare<\/span>\n  <span class=\"titolo-scheda\">Cosa non sappiamo ancora<\/span>\n  <span class=\"segno\" aria-hidden=\"true\">+<\/span>\n<\/button>\n<div class=\"scheda-panel\" id=\"php-panel-6\" role=\"region\" aria-labelledby=\"php-header-6\">\n<div class=\"scheda-panel-inner\">\n<div class=\"scheda-contenuto\">\n<p>Non \u00e8 noto quante intrusioni siano andate a segno, n\u00e9 chi sia dietro gli attacchi. Anche i numeri sull&#8217;esposizione vanno letti con cautela.<\/p>\n<p>Il dato del 70% del web indica i siti che usano PHP, non quelli vulnerabili. Sull&#8217;et\u00e0 del difetto le stime divergono: il Cert-Ue considera non verificate le ipotesi che lo fanno risalire al 2004.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n\n<section class=\"scheda\" data-open=\"false\">\n<button class=\"scheda-header\" aria-expanded=\"false\" aria-controls=\"php-panel-7\" id=\"php-header-7\">\n  <span class=\"tag\">Cosa fare<\/span>\n  <span class=\"titolo-scheda\">Le verifiche da fare subito su un sito in PHP<\/span>\n  <span class=\"segno\" aria-hidden=\"true\">+<\/span>\n<\/button>\n<div class=\"scheda-panel\" id=\"php-panel-7\" role=\"region\" aria-labelledby=\"php-header-7\">\n<div class=\"scheda-panel-inner\">\n<div class=\"scheda-contenuto\">\n<p>Il Csirt Italia raccomanda di aggiornare PHP e di cercare nei log segnali anomali. Tra questi errori ripetuti di memoria esaurita, crash dei processi e file modificati senza autorizzazione.<\/p>\n<p>Se l&#8217;aggiornamento non \u00e8 possibile, consiglia di sospendere il servizio. Per chi usa WordPress, Wordfence ricorda che gli aggiornamenti automatici del sito non toccano PHP. Va chiesto al fornitore di hosting.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n\n<\/div>\n\n<div class=\"footer-nota\">\n<span class=\"puntino\" aria-hidden=\"true\"><\/span>\n<p>La prossima scadenza \u00e8 il 31 dicembre, quando anche PHP 8.2 uscir\u00e0 dal supporto. Prima di allora andr\u00e0 verificato quanti server resteranno senza aggiornamento.<\/p>\n<\/div>\n\n<\/article>\n\n<script>\n(function(){\n  var root=document.getElementById('alground-php2shell');\n  if(!root)return;\n\n  var bottoni=root.querySelectorAll('.scheda-header');\n  var totale=bottoni.length;\n  var open=new Set();\n\n  var box=root.querySelector('#punti-php');\n  var label=root.querySelector('#testo-php');\n\n  for(var i=1;i<=totale;i++){\n    var d=document.createElement('span');\n    d.className='punto';\n    d.id='php-punto-'+i;\n    d.setAttribute('aria-hidden','true');\n    if(box)box.appendChild(d);\n  }\n\n  function aggiorna(){\n    if(label)label.textContent=open.size+' di '+totale+' schede aperte';\n  }\n\n  bottoni.forEach(function(b){\n    b.addEventListener('click',function(){\n      var card=b.closest('.scheda');\n      var on=b.getAttribute('aria-expanded')!=='true';\n      var n=b.id.split('-').pop();\n      var d=root.querySelector('#php-punto-'+n);\n      b.setAttribute('aria-expanded',on?'true':'false');\n      card.setAttribute('data-open',on?'true':'false');\n      if(on){open.add(n);if(d)d.classList.add('fatto');}\n      else{open.delete(n);if(d)d.classList.remove('fatto');}\n      aggiorna();\n    });\n  });\n\n  aggiorna();\n})();\n<\/script>\n\n","protected":false},"excerpt":{"rendered":"<p>Il 21 ottobre PHP ha corretto due vulnerabilit\u00e0 critiche che consentono di prendere il controllo dei server. Gli attacchi sono saliti a milioni in poche ore e diversi governi hanno spento i portali. La falla \u00e8 stata trovata con l&#8217;intelligenza artificiale.<\/p>\n","protected":false},"author":16,"featured_media":62957,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","jetpack_post_was_ever_published":false},"categories":[387],"tags":[2336,2147,2335,2332,2334,2333,72],"class_list":["post-62951","post","type-post","status-publish","format-standard","has-post-thumbnail","category-guide-sicurezza","tag-csirt-italia","tag-intelligenza-artificiale","tag-openai","tag-php","tag-php2shell","tag-vulnerabilita","tag-wordpress"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO Pro 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"Due falle critiche in PHP, CVE-2026-109618 e 109619: milioni di attacchi, siti pubblici spenti in Europa. Versioni corrette e verifiche consigliate dal Csirt.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Luigi Alberto Pinzi\"\/>\n\t<meta name=\"google-site-verification\" content=\"uXIDMontx6A-5jxjAAuTv_CtdoyW0fZ-TE172a9ELeg\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/alground.com\/site\/php2shell-falle-critiche-php\/62951\/\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO Pro (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"it_IT\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Alground | Tecnologia - Cyberwarfare - Intelligenza Artificiale\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"PHP2Shell: falle critiche in PHP, cosa fare subito\" \/>\n\t\t<meta property=\"og:description\" content=\"Due falle critiche in PHP, CVE-2026-109618 e 109619: milioni di attacchi, siti pubblici spenti in Europa. Versioni corrette e verifiche consigliate dal Csirt.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/alground.com\/site\/php2shell-falle-critiche-php\/62951\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/alground.com\/site\/wp-content\/uploads\/2026\/10\/php2shell-falle-critiche-php.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/alground.com\/site\/wp-content\/uploads\/2026\/10\/php2shell-falle-critiche-php.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"1100\" \/>\n\t\t<meta property=\"og:image:height\" content=\"550\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-10-22T10:55:01+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-10-22T10:55:01+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/AlgroundGeopoliticaAlessandroTrizio\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:site\" content=\"@Alground\" \/>\n\t\t<meta name=\"twitter:title\" content=\"PHP2Shell: falle critiche in PHP, cosa fare subito\" \/>\n\t\t<meta name=\"twitter:description\" content=\"Due falle critiche in PHP, CVE-2026-109618 e 109619: milioni di attacchi, siti pubblici spenti in Europa. Versioni corrette e verifiche consigliate dal Csirt.\" \/>\n\t\t<meta name=\"twitter:creator\" content=\"@Alground\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/alground.com\/site\/wp-content\/uploads\/2026\/10\/php2shell-falle-critiche-php.jpg\" \/>\n\t\t<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t\t<meta name=\"twitter:data1\" content=\"Luigi Alberto Pinzi\" \/>\n\t\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/alground.com\\\/site\\\/php2shell-falle-critiche-php\\\/62951\\\/#article\",\"name\":\"PHP2Shell: falle critiche in PHP, cosa fare subito\",\"headline\":\"PHP2Shell, due falle critiche in PHP: milioni di attacchi e portali pubblici spenti\",\"author\":{\"@id\":\"https:\\\/\\\/alground.com\\\/site\\\/author\\\/luigialbertopinzi\\\/#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/alground.com\\\/site\\\/#organization\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/alground.com\\\/site\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/php2shell-falle-critiche-php.jpg\",\"width\":1100,\"height\":550,\"caption\":\"Codice PHP in un editor. Foto: lmonk72, via Wikimedia Commons, licenza CC0 (pubblico dominio)\"},\"datePublished\":\"2026-10-22T11:55:01+01:00\",\"dateModified\":\"2026-10-22T11:55:01+01:00\",\"inLanguage\":\"it-IT\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/alground.com\\\/site\\\/php2shell-falle-critiche-php\\\/62951\\\/#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/alground.com\\\/site\\\/php2shell-falle-critiche-php\\\/62951\\\/#webpage\"},\"articleSection\":\"Cybersecurity, Csirt Italia, Intelligenza Artificiale, OpenAI, PHP, PHP2Shell, Vulnerabilit\\u00e0, WordPress\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/alground.com\\\/site\\\/php2shell-falle-critiche-php\\\/62951\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/alground.com\\\/site\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/alground.com\\\/site\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/alground.com\\\/site\\\/category\\\/guide-sicurezza\\\/#listItem\",\"name\":\"Cybersecurity\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/alground.com\\\/site\\\/category\\\/guide-sicurezza\\\/#listItem\",\"position\":2,\"name\":\"Cybersecurity\",\"item\":\"https:\\\/\\\/alground.com\\\/site\\\/category\\\/guide-sicurezza\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/alground.com\\\/site\\\/php2shell-falle-critiche-php\\\/62951\\\/#listItem\",\"name\":\"PHP2Shell, due falle critiche in PHP: milioni di attacchi e portali pubblici spenti\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/alground.com\\\/site\\\/#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/alground.com\\\/site\\\/php2shell-falle-critiche-php\\\/62951\\\/#listItem\",\"position\":3,\"name\":\"PHP2Shell, due falle critiche in PHP: milioni di attacchi e portali pubblici spenti\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/alground.com\\\/site\\\/category\\\/guide-sicurezza\\\/#listItem\",\"name\":\"Cybersecurity\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/alground.com\\\/site\\\/#organization\",\"name\":\"Alground\",\"description\":\"Tecnologia - Cyberwarfare - Intelligenza Artificiale\",\"url\":\"https:\\\/\\\/alground.com\\\/site\\\/\",\"email\":\"info@alground.com\",\"telephone\":\"+390687807295\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/alground.com\\\/site\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/Logo-tondo.png\",\"@id\":\"https:\\\/\\\/alground.com\\\/site\\\/php2shell-falle-critiche-php\\\/62951\\\/#organizationLogo\",\"width\":72,\"height\":75,\"caption\":\"Circular badge with a stylized glowing cyan turtle against a dark starry background.\"},\"image\":{\"@id\":\"https:\\\/\\\/alground.com\\\/site\\\/php2shell-falle-critiche-php\\\/62951\\\/#organizationLogo\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/AlgroundGeopoliticaAlessandroTrizio\",\"https:\\\/\\\/x.com\\\/Alground\",\"https:\\\/\\\/www.instagram.com\\\/alground_geopolitica\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/alground.com\\\/site\\\/author\\\/luigialbertopinzi\\\/#author\",\"url\":\"https:\\\/\\\/alground.com\\\/site\\\/author\\\/luigialbertopinzi\\\/\",\"name\":\"Luigi Alberto Pinzi\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/alground.com\\\/site\\\/php2shell-falle-critiche-php\\\/62951\\\/#authorImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3d8d12de83b3d9ad779bc605f74e3befe779b80c02eae3e2c958d58082915db5?s=96&d=identicon&r=g\",\"width\":96,\"height\":96,\"caption\":\"Luigi Alberto Pinzi\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/alground.com\\\/site\\\/php2shell-falle-critiche-php\\\/62951\\\/#webpage\",\"url\":\"https:\\\/\\\/alground.com\\\/site\\\/php2shell-falle-critiche-php\\\/62951\\\/\",\"name\":\"PHP2Shell: falle critiche in PHP, cosa fare subito\",\"description\":\"Due falle critiche in PHP, CVE-2026-109618 e 109619: milioni di attacchi, siti pubblici spenti in Europa. Versioni corrette e verifiche consigliate dal Csirt.\",\"inLanguage\":\"it-IT\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/alground.com\\\/site\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/alground.com\\\/site\\\/php2shell-falle-critiche-php\\\/62951\\\/#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/alground.com\\\/site\\\/author\\\/luigialbertopinzi\\\/#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/alground.com\\\/site\\\/author\\\/luigialbertopinzi\\\/#author\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/alground.com\\\/site\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/php2shell-falle-critiche-php.jpg\",\"@id\":\"https:\\\/\\\/alground.com\\\/site\\\/php2shell-falle-critiche-php\\\/62951\\\/#mainImage\",\"width\":1100,\"height\":550,\"caption\":\"Codice PHP in un editor. Foto: lmonk72, via Wikimedia Commons, licenza CC0 (pubblico dominio)\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/alground.com\\\/site\\\/php2shell-falle-critiche-php\\\/62951\\\/#mainImage\"},\"datePublished\":\"2026-10-22T11:55:01+01:00\",\"dateModified\":\"2026-10-22T11:55:01+01:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/alground.com\\\/site\\\/#website\",\"url\":\"https:\\\/\\\/alground.com\\\/site\\\/\",\"name\":\"Alground\",\"alternateName\":\"Alground\",\"description\":\"Tecnologia - Cyberwarfare - Intelligenza Artificiale\",\"inLanguage\":\"it-IT\",\"publisher\":{\"@id\":\"https:\\\/\\\/alground.com\\\/site\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO Pro -->\r\n\t\t<title>PHP2Shell: falle critiche in PHP, cosa fare subito<\/title>\n\n","aioseo_head_json":{"title":"PHP2Shell: falle critiche in PHP, cosa fare subito","description":"Due falle critiche in PHP, CVE-2026-109618 e 109619: milioni di attacchi, siti pubblici spenti in Europa. Versioni corrette e verifiche consigliate dal Csirt.","canonical_url":"https:\/\/alground.com\/site\/php2shell-falle-critiche-php\/62951\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"google-site-verification":"uXIDMontx6A-5jxjAAuTv_CtdoyW0fZ-TE172a9ELeg","miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/alground.com\/site\/php2shell-falle-critiche-php\/62951\/#article","name":"PHP2Shell: falle critiche in PHP, cosa fare subito","headline":"PHP2Shell, due falle critiche in PHP: milioni di attacchi e portali pubblici spenti","author":{"@id":"https:\/\/alground.com\/site\/author\/luigialbertopinzi\/#author"},"publisher":{"@id":"https:\/\/alground.com\/site\/#organization"},"image":{"@type":"ImageObject","url":"https:\/\/alground.com\/site\/wp-content\/uploads\/2026\/10\/php2shell-falle-critiche-php.jpg","width":1100,"height":550,"caption":"Codice PHP in un editor. Foto: lmonk72, via Wikimedia Commons, licenza CC0 (pubblico dominio)"},"datePublished":"2026-10-22T11:55:01+01:00","dateModified":"2026-10-22T11:55:01+01:00","inLanguage":"it-IT","mainEntityOfPage":{"@id":"https:\/\/alground.com\/site\/php2shell-falle-critiche-php\/62951\/#webpage"},"isPartOf":{"@id":"https:\/\/alground.com\/site\/php2shell-falle-critiche-php\/62951\/#webpage"},"articleSection":"Cybersecurity, Csirt Italia, Intelligenza Artificiale, OpenAI, PHP, PHP2Shell, Vulnerabilit\u00e0, WordPress"},{"@type":"BreadcrumbList","@id":"https:\/\/alground.com\/site\/php2shell-falle-critiche-php\/62951\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/alground.com\/site\/#listItem","position":1,"name":"Home","item":"https:\/\/alground.com\/site\/","nextItem":{"@type":"ListItem","@id":"https:\/\/alground.com\/site\/category\/guide-sicurezza\/#listItem","name":"Cybersecurity"}},{"@type":"ListItem","@id":"https:\/\/alground.com\/site\/category\/guide-sicurezza\/#listItem","position":2,"name":"Cybersecurity","item":"https:\/\/alground.com\/site\/category\/guide-sicurezza\/","nextItem":{"@type":"ListItem","@id":"https:\/\/alground.com\/site\/php2shell-falle-critiche-php\/62951\/#listItem","name":"PHP2Shell, due falle critiche in PHP: milioni di attacchi e portali pubblici spenti"},"previousItem":{"@type":"ListItem","@id":"https:\/\/alground.com\/site\/#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/alground.com\/site\/php2shell-falle-critiche-php\/62951\/#listItem","position":3,"name":"PHP2Shell, due falle critiche in PHP: milioni di attacchi e portali pubblici spenti","previousItem":{"@type":"ListItem","@id":"https:\/\/alground.com\/site\/category\/guide-sicurezza\/#listItem","name":"Cybersecurity"}}]},{"@type":"Organization","@id":"https:\/\/alground.com\/site\/#organization","name":"Alground","description":"Tecnologia - Cyberwarfare - Intelligenza Artificiale","url":"https:\/\/alground.com\/site\/","email":"info@alground.com","telephone":"+390687807295","logo":{"@type":"ImageObject","url":"https:\/\/alground.com\/site\/wp-content\/uploads\/2026\/05\/Logo-tondo.png","@id":"https:\/\/alground.com\/site\/php2shell-falle-critiche-php\/62951\/#organizationLogo","width":72,"height":75,"caption":"Circular badge with a stylized glowing cyan turtle against a dark starry background."},"image":{"@id":"https:\/\/alground.com\/site\/php2shell-falle-critiche-php\/62951\/#organizationLogo"},"sameAs":["https:\/\/www.facebook.com\/AlgroundGeopoliticaAlessandroTrizio","https:\/\/x.com\/Alground","https:\/\/www.instagram.com\/alground_geopolitica\/"]},{"@type":"Person","@id":"https:\/\/alground.com\/site\/author\/luigialbertopinzi\/#author","url":"https:\/\/alground.com\/site\/author\/luigialbertopinzi\/","name":"Luigi Alberto Pinzi","image":{"@type":"ImageObject","@id":"https:\/\/alground.com\/site\/php2shell-falle-critiche-php\/62951\/#authorImage","url":"https:\/\/secure.gravatar.com\/avatar\/3d8d12de83b3d9ad779bc605f74e3befe779b80c02eae3e2c958d58082915db5?s=96&d=identicon&r=g","width":96,"height":96,"caption":"Luigi Alberto Pinzi"}},{"@type":"WebPage","@id":"https:\/\/alground.com\/site\/php2shell-falle-critiche-php\/62951\/#webpage","url":"https:\/\/alground.com\/site\/php2shell-falle-critiche-php\/62951\/","name":"PHP2Shell: falle critiche in PHP, cosa fare subito","description":"Due falle critiche in PHP, CVE-2026-109618 e 109619: milioni di attacchi, siti pubblici spenti in Europa. Versioni corrette e verifiche consigliate dal Csirt.","inLanguage":"it-IT","isPartOf":{"@id":"https:\/\/alground.com\/site\/#website"},"breadcrumb":{"@id":"https:\/\/alground.com\/site\/php2shell-falle-critiche-php\/62951\/#breadcrumblist"},"author":{"@id":"https:\/\/alground.com\/site\/author\/luigialbertopinzi\/#author"},"creator":{"@id":"https:\/\/alground.com\/site\/author\/luigialbertopinzi\/#author"},"image":{"@type":"ImageObject","url":"https:\/\/alground.com\/site\/wp-content\/uploads\/2026\/10\/php2shell-falle-critiche-php.jpg","@id":"https:\/\/alground.com\/site\/php2shell-falle-critiche-php\/62951\/#mainImage","width":1100,"height":550,"caption":"Codice PHP in un editor. Foto: lmonk72, via Wikimedia Commons, licenza CC0 (pubblico dominio)"},"primaryImageOfPage":{"@id":"https:\/\/alground.com\/site\/php2shell-falle-critiche-php\/62951\/#mainImage"},"datePublished":"2026-10-22T11:55:01+01:00","dateModified":"2026-10-22T11:55:01+01:00"},{"@type":"WebSite","@id":"https:\/\/alground.com\/site\/#website","url":"https:\/\/alground.com\/site\/","name":"Alground","alternateName":"Alground","description":"Tecnologia - Cyberwarfare - Intelligenza Artificiale","inLanguage":"it-IT","publisher":{"@id":"https:\/\/alground.com\/site\/#organization"}}]},"og:locale":"it_IT","og:site_name":"Alground | Tecnologia - Cyberwarfare - Intelligenza Artificiale","og:type":"article","og:title":"PHP2Shell: falle critiche in PHP, cosa fare subito","og:description":"Due falle critiche in PHP, CVE-2026-109618 e 109619: milioni di attacchi, siti pubblici spenti in Europa. Versioni corrette e verifiche consigliate dal Csirt.","og:url":"https:\/\/alground.com\/site\/php2shell-falle-critiche-php\/62951\/","og:image":"https:\/\/alground.com\/site\/wp-content\/uploads\/2026\/10\/php2shell-falle-critiche-php.jpg","og:image:secure_url":"https:\/\/alground.com\/site\/wp-content\/uploads\/2026\/10\/php2shell-falle-critiche-php.jpg","og:image:width":1100,"og:image:height":550,"article:published_time":"2026-10-22T10:55:01+00:00","article:modified_time":"2026-10-22T10:55:01+00:00","article:publisher":"https:\/\/www.facebook.com\/AlgroundGeopoliticaAlessandroTrizio","twitter:card":"summary_large_image","twitter:site":"@Alground","twitter:title":"PHP2Shell: falle critiche in PHP, cosa fare subito","twitter:description":"Due falle critiche in PHP, CVE-2026-109618 e 109619: milioni di attacchi, siti pubblici spenti in Europa. Versioni corrette e verifiche consigliate dal Csirt.","twitter:creator":"@Alground","twitter:image":"https:\/\/alground.com\/site\/wp-content\/uploads\/2026\/10\/php2shell-falle-critiche-php.jpg","twitter:label1":"Written by","twitter:data1":"Luigi Alberto Pinzi","twitter:label2":"Est. reading time","twitter:data2":"3 minutes"},"aioseo_meta_data":{"post_id":"62951","title":"PHP2Shell: falle critiche in PHP, cosa fare subito","description":"Due falle critiche in PHP, CVE-2026-109618 e 109619: milioni di attacchi, siti pubblici spenti in Europa. Versioni corrette e verifiche consigliate dal Csirt.","keywords":null,"keyphrases":{"focus":{"keyphrase":"PHP2Shell","score":62},"additional":[{"keyphrase":"vulnerabilit\u00e0 PHP","score":69},{"keyphrase":"CVE-2026-109618","score":69},{"keyphrase":"CVE-2026-109619","score":69},{"keyphrase":"Csirt Italia","score":69},{"keyphrase":"aggiornamento PHP","score":69}]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-10-22 10:56:36","breadcrumb_settings":null,"limit_modified_date":false,"open_ai":null,"ai":null,"created":"2026-10-22 10:22:52","updated":"2026-10-22 12:10:19","reviewed_by":null,"focus_keyword":"PHP2Shell","additional_keywords":[{"word":"vulnerabilit\u00e0 PHP","score":69,"items":{"introductionKeyword":{"score":3},"keyphraseLength":{"score":9},"keyphraseDensity":{"score":4},"functionWordsInKeyphrase":{"score":9},"textCompetingLinks":{"score":9},"imageKeyphrase":{"score":3}}},{"word":"CVE-2026-109618","score":69,"items":{"introductionKeyword":{"score":3},"keyphraseLength":{"score":9},"keyphraseDensity":{"score":4},"functionWordsInKeyphrase":{"score":9},"textCompetingLinks":{"score":9},"imageKeyphrase":{"score":3}}},{"word":"CVE-2026-109619","score":69,"items":{"introductionKeyword":{"score":3},"keyphraseLength":{"score":9},"keyphraseDensity":{"score":4},"functionWordsInKeyphrase":{"score":9},"textCompetingLinks":{"score":9},"imageKeyphrase":{"score":3}}},{"word":"Csirt Italia","score":69,"items":{"introductionKeyword":{"score":3},"keyphraseLength":{"score":9},"keyphraseDensity":{"score":4},"functionWordsInKeyphrase":{"score":9},"textCompetingLinks":{"score":9},"imageKeyphrase":{"score":3}}},{"word":"aggiornamento PHP","score":69,"items":{"introductionKeyword":{"score":3},"keyphraseLength":{"score":9},"keyphraseDensity":{"score":4},"functionWordsInKeyphrase":{"score":9},"textCompetingLinks":{"score":9},"imageKeyphrase":{"score":3}}}],"truseo_locale":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/alground.com\/site\/\" title=\"Home\">Home<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/alground.com\/site\/category\/guide-sicurezza\/\" title=\"Cybersecurity\">Cybersecurity<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\tPHP2Shell, due falle critiche in PHP: milioni di attacchi e portali pubblici spenti\n<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/alground.com\/site\/"},{"label":"Cybersecurity","link":"https:\/\/alground.com\/site\/category\/guide-sicurezza\/"},{"label":"PHP2Shell, due falle critiche in PHP: milioni di attacchi e portali pubblici spenti","link":"https:\/\/alground.com\/site\/php2shell-falle-critiche-php\/62951\/"}],"jetpack_featured_media_url":"https:\/\/alground.com\/site\/wp-content\/uploads\/2026\/10\/php2shell-falle-critiche-php.jpg","_links":{"self":[{"href":"https:\/\/alground.com\/site\/wp-json\/wp\/v2\/posts\/62951","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/alground.com\/site\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/alground.com\/site\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/alground.com\/site\/wp-json\/wp\/v2\/users\/16"}],"replies":[{"embeddable":true,"href":"https:\/\/alground.com\/site\/wp-json\/wp\/v2\/comments?post=62951"}],"version-history":[{"count":1,"href":"https:\/\/alground.com\/site\/wp-json\/wp\/v2\/posts\/62951\/revisions"}],"predecessor-version":[{"id":62958,"href":"https:\/\/alground.com\/site\/wp-json\/wp\/v2\/posts\/62951\/revisions\/62958"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/alground.com\/site\/wp-json\/wp\/v2\/media\/62957"}],"wp:attachment":[{"href":"https:\/\/alground.com\/site\/wp-json\/wp\/v2\/media?parent=62951"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/alground.com\/site\/wp-json\/wp\/v2\/categories?post=62951"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/alground.com\/site\/wp-json\/wp\/v2\/tags?post=62951"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}