Nearly every blog and wiki out there: shutting down for the day because of the still unpatched #PHP2Shell vulnerability

Me, with #Friendica and #Nextcloud still up for the time being: with one eye on htop and the other hammering apt update, hoping my single-user server is irrelevant enough

in reply to Carlos Solís

Hi!

Please see our statement in this post: mastodon.xyz/@nextcloud/117478725232757164

Stay safe!


⚠️ We have been informed by CERT of an issue affecting PHP:

cert.europa.eu/publications/security-advisories/2026-018 php.net/archive/2026.php#2026-10-20-1

This would affect all online PHP servers and operations including Nextcloud as well as WordPress and other popular services.

The CERT recommendation is to turn off servers running PHP based applications until updates to PHP are available and can be applied.

We will release an update as soon as more information is known about affected PHP versions and availability of updates.