PHP2Shell

On October 20, 2026, two critical remote code execution vulnerabilities were found in PHP versions from 5.4 to 8.5. The next day, an emergency patch was released. KE0ONU SearXNG was taken offline as a precaution, even though SearXNG does not use any PHP code. The Tampa server is now running the latest version of PHP 8.2 with the emergency patch.