{"id":14159,"date":"2026-10-21T16:56:32","date_gmt":"2026-10-21T14:56:32","guid":{"rendered":"https:\/\/www.infordisa.com\/soc\/?p=14159"},"modified":"2026-10-21T16:58:47","modified_gmt":"2026-10-21T14:58:47","slug":"php2shell-execucio-remota-codi","status":"publish","type":"post","link":"https:\/\/www.infordisa.com\/soc\/ca\/php2shell-ejecucion-remota-codigo\/","title":{"rendered":"PHP2Shell, execuci\u00f3 remota de codi a PHP"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"14159\" class=\"elementor elementor-14159\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-83db366 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"83db366\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-f859aa7\" data-id=\"f859aa7\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-6255624 elementor-widget elementor-widget-shortcode\" data-id=\"6255624\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"shortcode.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-shortcode\"><span style=\"color: #c02b23;font-weight: bold\">Cr&iacute;tica <\/span><img loading=\"lazy\" decoding=\"async\" width=\"10\" height=\"10\" src=\"https:\/\/www.infordisa.com\/soc\/imgs\/alerta-5.png\" alt=\"Alerta 5\"\/><\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b267f55 elementor-widget elementor-widget-text-editor\" data-id=\"b267f55\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div><strong><a href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-109618\" target=\"_blank\" rel=\"noopener\">CVE-2026-109618 y CVE-2026-109619<\/a><\/strong><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-721ce6a elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"721ce6a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5a9e427 elementor-toc--content-ellipsis elementor-toc--minimized-on-mobile elementor-widget elementor-widget-table-of-contents\" data-id=\"5a9e427\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings='{\"headings_by_tags\":[\"h2\"],\"exclude_headings_by_selector\":[],\"marker_view\":\"bullets\",\"icon\":{\"value\":\"fas fa-chevron-right\",\"library\":\"fa-solid\"},\"no_headings_message\":\"No se ha encontrado ning\\u00fan encabezado en esta p\\u00e1gina.\",\"minimized_on\":\"mobile\",\"minimize_box\":\"yes\",\"hierarchical_view\":\"yes\",\"min_height\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"min_height_tablet\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"min_height_mobile\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]}}' data-widget_type=\"table-of-contents.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-toc__header\">\n\t\t\t\t\t\t<h4 class=\"elementor-toc__header-title\">\n\t\t\t\tTabla de contenidos\t\t\t<\/h4>\n\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-toc__toggle-button elementor-toc__toggle-button--expand\" role=\"button\" tabindex=\"0\" aria-controls=\"elementor-toc__5a9e427\" aria-expanded=\"true\" aria-label=\"Abrir la tabla de contenidos\"><i aria-hidden=\"true\" class=\"fas fa-chevron-down\"><\/i><\/div>\n\t\t\t\t<div class=\"elementor-toc__toggle-button elementor-toc__toggle-button--collapse\" role=\"button\" tabindex=\"0\" aria-controls=\"elementor-toc__5a9e427\" aria-expanded=\"true\" aria-label=\"Cerrar la tabla de contenidos\"><i aria-hidden=\"true\" class=\"fas fa-chevron-up\"><\/i><\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<div id=\"elementor-toc__5a9e427\" class=\"elementor-toc__body\">\n\t\t\t<div class=\"elementor-toc__spinner-container\">\n\t\t\t\t<i class=\"elementor-toc__spinner eicon-animation-spin eicon-loading\" aria-hidden=\"true\"><\/i>\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5fa1ccb elementor-widget elementor-widget-text-editor\" data-id=\"5fa1ccb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2 dir=\"ltr\">&iquest;Qu&eacute; ha pasado?<\/h2><p dir=\"ltr\">PHP 8.5.12, 8.4.27, 8.3.36 y 8.2.35 corrigen dos vulnerabilidades cr&iacute;ticas que pueden permitir la ejecuci&oacute;n remota de c&oacute;digo sin <a class=\"glossaryLink\" href=\"https:\/\/www.infordisa.com\/soc\/ca\/glosario-definicion\/autenticacion\/\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">autenticaci&oacute;n<\/a>, y el equipo de PHP recomienda encarecidamente actualizar de inmediato. Las vulnerabilidades se conocen como <strong>PHP2Shell<\/strong>.<\/p><p dir=\"ltr\">El caso es especialmente urgente porque los detalles se filtraron en internet el 20 de octubre, antes de la divulgaci&oacute;n coordinada y antes de que existiera el parche. Investigadores de watchTowr han confirmado que las vulnerabilidades son reales y han reproducido <a class=\"glossaryLink\"  href=\"https:\/\/www.infordisa.com\/soc\/ca\/glosario-definicion\/cve\/\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>CVE<\/a>-2026-109618.<\/p><ul dir=\"ltr\"><li><strong>CVE-2026-109618 (RCE por corrupci&oacute;n de memoria tras falta de memoria):<\/strong> la gesti&oacute;n de errores por falta de memoria puede interrumpir PHP mientras los datos internos de la petici&oacute;n solo est&aacute;n parcialmente inicializados, y la limpieza posterior puede tratarlos como v&aacute;lidos.<\/li><li><strong>CVE-2026-109619 (RCE por estado global residual):<\/strong> cierto estado interno de una petici&oacute;n puede sobrevivir despu&eacute;s de liberar su memoria, y una petici&oacute;n posterior atendida por el mismo proceso puede reutilizarlo antes de que se reinicialice.<\/li><\/ul><p dir=\"ltr\">En Espa&ntilde;a, INCIBE-CERT ha publicado un aviso sobre estas vulnerabilidades con importancia 5 sobre 5 (cr&iacute;tica). Seg&uacute;n INCIBE, el equipo de PHP indica que todas las versiones podr&iacute;an estar afectadas, aunque las pruebas solo se han hecho en las versiones 5 a 8. En el momento de publicar su aviso, INCIBE no ten&iacute;a constancia de explotaci&oacute;n activa de ninguno de los dos <a class=\"glossaryLink\"  href=\"https:\/\/www.infordisa.com\/soc\/ca\/glosario-definicion\/cve\/\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>CVE<\/a>.<\/p><h2 dir=\"ltr\">&iquest;A qui&eacute;n afecta?<\/h2><p dir=\"ltr\">A pr&aacute;cticamente cualquier organizaci&oacute;n con una web o aplicaci&oacute;n en PHP (WordPress, PrestaShop, Magento, intranets, ERPs web, etc.). Seg&uacute;n PHP, est&aacute;n en riesgo todas las instalaciones que sirven peticiones web, incluyendo PHP-FPM, Apache con mod_php, php-cgi, FrankenPHP y LiteSpeed. El riesgo m&aacute;s alto es con mod_php, donde se ha demostrado un <a class=\"glossaryLink\"  href=\"https:\/\/www.infordisa.com\/soc\/ca\/glosario-definicion\/exploit\/\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>exploit<\/a> en el que una petici&oacute;n sin autenticaci&oacute;n puede desencadenar el ataque antes de que se ejecute ning&uacute;n c&oacute;digo de la aplicaci&oacute;n.<\/p><p dir=\"ltr\">A escala global, Palo Alto Networks ha identificado m&aacute;s de 22,6 millones de instancias expuestas potencialmente vulnerables.<\/p><h2 dir=\"ltr\">&iquest;Qu&eacute; hay que hacer?<\/h2><ol dir=\"ltr\"><li><strong>Inventariar. <\/strong>Localizar todos los sistemas con PHP, empezando por los expuestos a internet, sin limitarse a las versiones antiguas, ya que todas pueden estar afectadas.<\/li><li><strong>Actualizar ya<\/strong> a 8.5.12, 8.4.27, 8.3.36 o 8.2.35 seg&uacute;n la rama. Las distribuciones Linux y los proveedores LTS recibieron los parches por adelantado, as&iacute; que conviene consultar si ya hay paquetes actualizados. Para comprobarlo, se puede revisar el changelog del paquete (por ejemplo <code dir=\"ltr\">apt changelog php8.3-cli<\/code> o <code dir=\"ltr\">rpm -q --changelog php<\/code>) y buscar el n&uacute;mero del CVE.<\/li><li><strong>Si usas el repositorio Remi:<\/strong> PHP recomienda pasar a los paquetes de la distribuci&oacute;n o compilar desde c&oacute;digo fuente, ya que este repositorio no tendr&aacute; actualizaciones hoy.<\/li><li><strong>Hosting compartido:<\/strong> confirmar con el proveedor que ha aplicado el parche en todas las versiones de PHP que ofrece.<\/li><li><strong>Versiones sin soporte (8.1 o anterior):<\/strong> ya no reciben actualizaciones del proyecto PHP; algunas distribuciones y proveedores LTS ofrecen correcciones adaptadas. Dada la gravedad, el equipo de PHP ha publicado parches m&iacute;nimos para PHP 7.4, 8.0 y 8.1 para quien compile desde c&oacute;digo fuente. Aun as&iacute;, lo recomendable es migrar a una versi&oacute;n con soporte.<\/li><li><strong>Software de terceros:<\/strong> vigilar las actualizaciones de appliances y productos que incluyan PHP. El NCSC-NL ha publicado un inventario de productos con dependencia de PHP potencialmente afectados.<\/li><li><strong>Si no se puede actualizar de inmediato<\/strong>, aplicar las mitigaciones temporales oficiales. Solo la actualizaci&oacute;n es una soluci&oacute;n completa; estas medidas reducen la exposici&oacute;n a v&iacute;as de ataque concretas, pero no hacen la instalaci&oacute;n segura.<br><ul dir=\"ltr\"><li><strong>CVE-2026-109618:<\/strong> establecer <code dir=\"ltr\">memory_limit=-1<\/code> de forma que las aplicaciones no puedan sobrescribirlo (por ejemplo con <code dir=\"ltr\">php_admin_value<\/code>), fijar un <code dir=\"ltr\">post_max_size<\/code> bajo (8M sin subida de ficheros, 32M si son necesarias) y usar un l&iacute;mite de contenedor o cgroup como barrera de <a class=\"glossaryLink\" href=\"https:\/\/www.infordisa.com\/soc\/ca\/glosario-definicion\/disponibilidad\/\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">disponibilidad<\/a>. &#9888;&#65039; Quitar el l&iacute;mite de memoria sin un l&iacute;mite de cgroup o contenedor puede dejar el <a class=\"glossaryLink\"  href=\"https:\/\/www.infordisa.com\/soc\/ca\/glosario-definicion\/servidor\/\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>servidor<\/a> sin RAM.<\/li><li><strong><a class=\"glossaryLink\"  href=\"https:\/\/www.infordisa.com\/soc\/ca\/glosario-definicion\/cve\/\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>CVE<\/a>-2026-109619:<\/strong> establecer <code dir=\"ltr\">session.upload_progress.enabled=0<\/code> y reiniciar todos los workers, configur&aacute;ndolo en <code dir=\"ltr\">php.ini<\/code>, el pool de FPM o el servidor (no mediante <code dir=\"ltr\">ini_set()<\/code> ni <code dir=\"ltr\">.user.ini<\/code>); en PHP 8.5, adem&aacute;s, <code dir=\"ltr\">fatal_error_backtraces=0<\/code>.<\/li><\/ul><\/li><li><strong>&Uacute;ltimo recurso:<\/strong> si no se puede parchear ni mitigar a tiempo, valorar desconectar el sistema hasta poder protegerlo.<\/li><li><strong>Revisar posibles compromisos.<\/strong> En sistemas que han estado expuestos sin parche, buscar indicios de intrusi&oacute;n y puertas traseras.<\/li><\/ol><h2 dir=\"ltr\">&iquest;Necesitas ayuda?<\/h2><p dir=\"ltr\">Si no tienes claro qu&eacute; versi&oacute;n de PHP usan tus webs o servidores, o quieres que revisemos tu exposici&oacute;n, <a href=\"https:\/\/www.infordisa.com\/soc\/contactar\/\">contacta con el equipo de Infordisa<\/a> y te ayudamos a evaluar y aplicar las actualizaciones.<\/p><p dir=\"ltr\"><strong>Fuentes:<br><\/strong><a href=\"https:\/\/www.php.net\/archive\/2026.php#2026-10-21-5\" target=\"_blank\" rel=\"noopener\">Aviso de seguridad oficial de PHP<\/a> &middot; <a href=\"https:\/\/www.incibe.es\/incibe-cert\/alerta-temprana\/avisos\/multiples-vulnerabilidades-en-php\" target=\"_blank\" rel=\"noopener\">INCIBE-CERT<\/a> &middot; <a href=\"https:\/\/www.ncsc.gov.uk\/news\/critical-security-issue-affecting-php\" target=\"_blank\" rel=\"noopener\">NCSC<\/a> &middot; <a href=\"https:\/\/github.com\/php\/php-src\/security\/advisories\" target=\"_blank\" rel=\"noopener\">Avisos t&eacute;cnicos en GitHub<\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>PHP2Shell: vulnerabilidades cr&iacute;ticas en PHP permiten ejecuci&oacute;n remota de c&oacute;digo. Versiones afectadas, parches y c&oacute;mo proteger tu <a class=\"glossaryLink\"  href=\"https:\/\/www.infordisa.com\/soc\/ca\/glosario-definicion\/servidor\/\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>servidor<\/a>.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[4],"tags":[229,147],"class_list":["post-14159","post","type-post","status-publish","format-standard","hentry","category-alertas-de-seguridad","tag-php","tag-vulnerabilidad","masonry-post","generate-columns","tablet-grid-50","mobile-grid-100","grid-parent","grid-25"],"acf":[],"yoast_head":"<title>PHP2Shell, ejecuci\u00f3n remota de c\u00f3digo en PHP - INFORDISA \/ Security Operations Center<\/title>\n<meta name=\"description\" content=\"PHP2Shell: vulnerabilidades cr\u00edticas en PHP permiten ejecuci\u00f3n remota de c\u00f3digo. Versiones afectadas, parches y c\u00f3mo proteger tu servidor.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.infordisa.com\/soc\/ca\/php2shell-execucio-remota-codi\/\" \/>\n<meta property=\"og:locale\" content=\"ca_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"PHP2Shell, ejecuci\u00f3n remota de c\u00f3digo en PHP - INFORDISA \/ Security Operations Center\" \/>\n<meta property=\"og:description\" content=\"PHP2Shell: vulnerabilidades cr\u00edticas en PHP permiten ejecuci\u00f3n remota de c\u00f3digo. Versiones afectadas, parches y c\u00f3mo proteger tu servidor.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.infordisa.com\/soc\/ca\/php2shell-execucio-remota-codi\/\" \/>\n<meta property=\"og:site_name\" content=\"INFORDISA \/ Security Operations Center\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/infordisa\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-21T14:56:32+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-21T14:58:47+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2026\/10\/alerta-SOC.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Jordi Sala\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2026\/10\/alerta-SOC.jpg\" \/>\n<meta name=\"twitter:creator\" content=\"@infordisa\" \/>\n<meta name=\"twitter:site\" content=\"@infordisa\" \/>\n<meta name=\"twitter:label1\" content=\"Escrit per\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jordi Sala\" \/>\n\t<meta name=\"twitter:label2\" content=\"Temps estimat de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minuts\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/php2shell-ejecucion-remota-codigo\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/php2shell-ejecucion-remota-codigo\\\/\"},\"author\":{\"name\":\"Jordi Sala\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/person\\\/9e7088b9a88f62117d466d94479b2375\"},\"headline\":\"PHP2Shell, ejecuci\u00f3n remota de c\u00f3digo en PHP\",\"datePublished\":\"2026-10-21T14:56:32+00:00\",\"dateModified\":\"2026-10-21T14:58:47+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/php2shell-ejecucion-remota-codigo\\\/\"},\"wordCount\":783,\"publisher\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#organization\"},\"keywords\":[\"PHP\",\"Vulnerabilidad\"],\"articleSection\":[\"Alertas de seguridad\"],\"inLanguage\":\"ca\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/php2shell-ejecucion-remota-codigo\\\/\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/php2shell-ejecucion-remota-codigo\\\/\",\"name\":\"PHP2Shell, ejecuci\u00f3n remota de c\u00f3digo en PHP - INFORDISA \\\/ Security Operations Center\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#website\"},\"datePublished\":\"2026-10-21T14:56:32+00:00\",\"dateModified\":\"2026-10-21T14:58:47+00:00\",\"description\":\"PHP2Shell: vulnerabilidades cr\u00edticas en PHP permiten ejecuci\u00f3n remota de c\u00f3digo. Versiones afectadas, parches y c\u00f3mo proteger tu servidor.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/php2shell-ejecucion-remota-codigo\\\/#breadcrumb\"},\"inLanguage\":\"ca\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/php2shell-ejecucion-remota-codigo\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/php2shell-ejecucion-remota-codigo\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"PHP2Shell, ejecuci\u00f3n remota de c\u00f3digo en PHP\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#website\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\",\"name\":\"INFORDISA \\\/ Security Operations Center\",\"description\":\"Portal de Ciberseguridad\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"ca\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#organization\",\"name\":\"INFORDISA \\\/ Security Operations Center\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"ca\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2021\\\/11\\\/logo-securityoperationscenter.png\",\"contentUrl\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2021\\\/11\\\/logo-securityoperationscenter.png\",\"width\":400,\"height\":34,\"caption\":\"INFORDISA \\\/ Security Operations Center\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/infordisa\\\/\",\"https:\\\/\\\/x.com\\\/infordisa\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/infordisa\",\"https:\\\/\\\/www.youtube.com\\\/user\\\/InfordisaTV\",\"https:\\\/\\\/www.instagram.com\\\/infordisa\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/person\\\/9e7088b9a88f62117d466d94479b2375\",\"name\":\"Jordi Sala\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"ca\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g\",\"caption\":\"Jordi Sala\"},\"description\":\"Marketing\",\"sameAs\":[\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\"],\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/ca\\\/author\\\/jsala\\\/\"}]}<\/script>","yoast_head_json":{"title":"PHP2Shell, execuci\u00f3 remota de codi a PHP - INFORDISA \/ Security Operations Center","description":"PHP2Shell: vulnerabilitats cr\u00edtiques a PHP permeten execuci\u00f3 remota de codi. Versions afectades, pegats i com protegir el teu servidor.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.infordisa.com\/soc\/ca\/php2shell-execucio-remota-codi\/","og_locale":"ca_ES","og_type":"article","og_title":"PHP2Shell, ejecuci\u00f3n remota de c\u00f3digo en PHP - INFORDISA \/ Security Operations Center","og_description":"PHP2Shell: vulnerabilidades cr\u00edticas en PHP permiten ejecuci\u00f3n remota de c\u00f3digo. Versiones afectadas, parches y c\u00f3mo proteger tu servidor.","og_url":"https:\/\/www.infordisa.com\/soc\/ca\/php2shell-execucio-remota-codi\/","og_site_name":"INFORDISA \/ Security Operations Center","article_publisher":"https:\/\/www.facebook.com\/infordisa\/","article_published_time":"2026-10-21T14:56:32+00:00","article_modified_time":"2026-10-21T14:58:47+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2026\/10\/alerta-SOC.jpg","type":"image\/jpeg"}],"author":"Jordi Sala","twitter_card":"summary_large_image","twitter_image":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2026\/10\/alerta-SOC.jpg","twitter_creator":"@infordisa","twitter_site":"@infordisa","twitter_misc":{"Escrit per":"Jordi Sala","Temps estimat de lectura":"4 minuts"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.infordisa.com\/soc\/php2shell-ejecucion-remota-codigo\/#article","isPartOf":{"@id":"https:\/\/www.infordisa.com\/soc\/php2shell-ejecucion-remota-codigo\/"},"author":{"name":"Jordi Sala","@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/person\/9e7088b9a88f62117d466d94479b2375"},"headline":"PHP2Shell, ejecuci\u00f3n remota de c\u00f3digo en PHP","datePublished":"2026-10-21T14:56:32+00:00","dateModified":"2026-10-21T14:58:47+00:00","mainEntityOfPage":{"@id":"https:\/\/www.infordisa.com\/soc\/php2shell-ejecucion-remota-codigo\/"},"wordCount":783,"publisher":{"@id":"https:\/\/www.infordisa.com\/soc\/#organization"},"keywords":["PHP","Vulnerabilidad"],"articleSection":["Alertas de seguridad"],"inLanguage":"ca"},{"@type":"WebPage","@id":"https:\/\/www.infordisa.com\/soc\/php2shell-ejecucion-remota-codigo\/","url":"https:\/\/www.infordisa.com\/soc\/php2shell-ejecucion-remota-codigo\/","name":"PHP2Shell, execuci\u00f3 remota de codi a PHP - INFORDISA \/ Security Operations Center","isPartOf":{"@id":"https:\/\/www.infordisa.com\/soc\/#website"},"datePublished":"2026-10-21T14:56:32+00:00","dateModified":"2026-10-21T14:58:47+00:00","description":"PHP2Shell: vulnerabilitats cr\u00edtiques a PHP permeten execuci\u00f3 remota de codi. Versions afectades, pegats i com protegir el teu servidor.","breadcrumb":{"@id":"https:\/\/www.infordisa.com\/soc\/php2shell-ejecucion-remota-codigo\/#breadcrumb"},"inLanguage":"ca","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.infordisa.com\/soc\/php2shell-ejecucion-remota-codigo\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.infordisa.com\/soc\/php2shell-ejecucion-remota-codigo\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/www.infordisa.com\/soc\/"},{"@type":"ListItem","position":2,"name":"PHP2Shell, ejecuci\u00f3n remota de c\u00f3digo en PHP"}]},{"@type":"WebSite","@id":"https:\/\/www.infordisa.com\/soc\/#website","url":"https:\/\/www.infordisa.com\/soc\/","name":"INFORDISA \/ Security Operations Center","description":"Portal de Ciberseguretat","publisher":{"@id":"https:\/\/www.infordisa.com\/soc\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.infordisa.com\/soc\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"ca"},{"@type":"Organization","@id":"https:\/\/www.infordisa.com\/soc\/#organization","name":"INFORDISA \/ Security Operations Center","url":"https:\/\/www.infordisa.com\/soc\/","logo":{"@type":"ImageObject","inLanguage":"ca","@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/logo\/image\/","url":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2021\/11\/logo-securityoperationscenter.png","contentUrl":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2021\/11\/logo-securityoperationscenter.png","width":400,"height":34,"caption":"INFORDISA \/ Security Operations Center"},"image":{"@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/infordisa\/","https:\/\/x.com\/infordisa","https:\/\/www.linkedin.com\/company\/infordisa","https:\/\/www.youtube.com\/user\/InfordisaTV","https:\/\/www.instagram.com\/infordisa\/"]},{"@type":"Person","@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/person\/9e7088b9a88f62117d466d94479b2375","name":"Jordi Sala","image":{"@type":"ImageObject","inLanguage":"ca","@id":"https:\/\/secure.gravatar.com\/avatar\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g","caption":"Jordi Sala"},"description":"M\u00e0rqueting","sameAs":["https:\/\/www.infordisa.com\/soc\/"],"url":"https:\/\/www.infordisa.com\/soc\/ca\/author\/jsala\/"}]}},"_links":{"self":[{"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/posts\/14159","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/comments?post=14159"}],"version-history":[{"count":8,"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/posts\/14159\/revisions"}],"predecessor-version":[{"id":14168,"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/posts\/14159\/revisions\/14168"}],"wp:attachment":[{"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/media?parent=14159"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/categories?post=14159"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/tags?post=14159"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}