{"ok":true,"nota":{"id":"e445215f903056c2","slug":"investigadores-hallan-un-metodo-para-saltear-las-defensas-de-php-contr-e44521","titulo":"Investigadores hallan un método para saltear las defensas de PHP contra ataques remotos","resumen":"Un investigador describió un exploit que evade protecciones diseñadas para impedir la ejecución remota de código en servidores que usan PHP. Según el propio investigador, actores maliciosos ya están dedicando tiempo a esta vulnerabilidad.","fuente":"theregister","fuenteNombre":"The Register","color":"#ff0000","autor":"Jessica Lyons","url":"https://www.theregister.com/security/2026/10/22/php2shell-exploit-bypasses-protections-designed-to-stop-remote-code-execution/5304883","imagen":"https://image.theregister.com/?imageId=5304901&width=800","tema":"tecnologia","subtemas":["ciberseguridad","php","vulnerabilidades","servidores web"],"entidades":["PHP","The Register"],"formato":"dato","entretenimiento":false,"pubTs":"2026-10-22T20:37:52.000Z","indexTs":"2026-10-22T22:54:28.111Z","hash":"6dbe048b9a1acc96ec550ae5bd14398d6266f23dd39beaba9329be88774c3222","tsa":{"time":"Oct 22 22:55:19 2026 GMT","provider":"freetsa.org","sobre":"sello"},"stats":{"views":1,"likes":0,"clicks":0,"dwell":0},"tipo":"normal","registro":"hallazgo","porQueImporta":"Un servidor vulnerable puede terminar controlado por alguien ajeno, y eso afecta a sitios web de empresas, comercios y hasta organismos locales que corren PHP. Cuando la falla se conoce, la carrera se vuelve entre quien la aprovecha y quien actualiza primero. Si tu web o la de tu negocio usa PHP, el parche no es opcional: esperar es regalarle la puerta a alguien.","quienFirma":"The Register (investigador independiente)","confianza":"divulgacion","consulta":null},"sello":{"hash":"6dbe048b9a1acc96ec550ae5bd14398d6266f23dd39beaba9329be88774c3222","sello":"73321525a1d59a1d03e07bf08b8b0aab25a108010f4486afb8cd074045e95cc9","beacon":{"drand":{"cadena":"8990e7a9aaed2ffed73dbd7092123d6f289930540d7651336225dc172e51b2ce","ronda":6575956,"aleatorio":"2a57a8658c1d539864cc4ae3efbab33cd3270e814e75bf7846346721462f12e7","tiempo":"2026-10-22T22:55:00.000Z"},"nist":{"cadena":2,"pulso":1995177,"salida":"44471E1C8A000FA428D45A5C480CB1AAB6429BD43B19D16210510F8146BBA7769584FA09251B999E8D0B2F0EEC2EEEC53219499677294EE43E94C8610586BE7D","tiempo":"2026-10-22T22:54:00.000Z"},"noAntes":"2026-10-22T22:55:00.000Z"},"verificacion":{"drand":true,"nist":true},"tsa":{"time":"Oct 22 22:55:19 2026 GMT","provider":"freetsa.org","sobre":"sello"},"original":{"titulo":"PHP2Shell exploit bypasses protections designed to stop remote code execution","descripcion":"“Adversaries are clearly spending time (and tokens) on this bug,” researcher says.","pubDate":"Thu, 22 Oct 2026 20:37:52 +0000","url":"https://www.theregister.com/security/2026/10/22/php2shell-exploit-bypasses-protections-designed-to-stop-remote-code-execution/5304883"},"indexado":"2026-10-22T22:54:28.111Z"}}