PHP2Shell: how to confirm your PHP server is actually patched
PHP2Shell, the pair of critical PHP bugs fixed on October 21, 2026, is the kind of vulnerability where php -v can mislead you in both directions. A fully patched Ubuntu 24.04 box still says 8.3.6. An updated host can keep serving requests from old workers. And the CLI you ran the…