PHP altyap\u0131s\u0131nda tespit edilen iki kritik g\u00fcvenlik a\u00e7\u0131\u011f\u0131, internet siteleri i\u00e7in risk olu\u015fturuyor. PHP2Shell ad\u0131yla an\u0131lan ve CVE-2026-109618 ile CVE-2026-109619 kodlar\u0131yla takip edilen a\u00e7\u0131klar, belirli ko\u015fullarda kimlik do\u011frulamas\u0131 olmadan uzaktan kod \u00e7al\u0131\u015ft\u0131r\u0131lmas\u0131na ve hassas verilerin a\u00e7\u0131\u011fa \u00e7\u0131kmas\u0131na neden olabiliyor. PHP ekibi, g\u00fcvenlik g\u00fcncellemelerini 21 Ekim 2026\u2019da yay\u0131mlad\u0131.<\/p>\n
A\u00e7\u0131klar\u0131n tespitinde yapay zek\u00e2 kullan\u0131ld\u0131<\/p>\n
Calif Research ve Wiz Research ekipleri, PHP\u2019nin kod yap\u0131s\u0131n\u0131 birbirinden ba\u011f\u0131ms\u0131z inceleyerek g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 tespit etti ve bulgular\u0131n\u0131 PHP ekibiyle payla\u015ft\u0131.<\/p>\n
OpenAI\u2019\u0131n yay\u0131mlad\u0131\u011f\u0131 bilgilere g\u00f6re Calif Research, GPT-5.6 Sol modelinden yararland\u0131. Wiz Research ise Wiz Atlas, Gemini 4 Argon ve GPT-5.6 Sol ara\u00e7lar\u0131n\u0131 kulland\u0131. Wiz\u2019in a\u00e7\u0131klamas\u0131na g\u00f6re Gemini 4 Argon, a\u00e7\u0131\u011f\u0131n tespit edilmesi ve g\u00fcvenlik d\u00fczeltmesinin do\u011frulanmas\u0131 s\u00fcre\u00e7lerine katk\u0131 sa\u011flad\u0131.<\/p>\n
Calif Research, bulgusunu 1 A\u011fustos 2026\u2019da tespit ederek 11 A\u011fustos\u2019ta bildirdi. Wiz Research ise ilk bulgusunu 19 A\u011fustos\u2019ta tespit etti ve 24 A\u011fustos\u2019ta PHP ekibine iletti.<\/p>\n
WordPress siteleri de risk alt\u0131nda olabilir<\/p>\n
PHP, WordPress ba\u015fta olmak \u00fczere bir\u00e7ok internet sitesi ve web uygulamas\u0131nda kullan\u0131l\u0131yor. Bu nedenle etkilenen PHP s\u00fcr\u00fcmlerini kullanan sunucular, \u00fczerlerinde hangi uygulama \u00e7al\u0131\u015f\u0131rsa \u00e7al\u0131\u015fs\u0131n risk ta\u015f\u0131yabiliyor.<\/p>\n
A\u00e7\u0131klar\u0131n istismar edilmesi, sunucudaki yetki d\u00fczeyine ba\u011fl\u0131 olarak kod \u00e7al\u0131\u015ft\u0131r\u0131lmas\u0131na ve hassas verilere eri\u015filmesine yol a\u00e7abiliyor. NHS England Digital, a\u00e7\u0131klarla ilgili ba\u015far\u0131l\u0131 istismarlar\u0131n WordPress, Drupal ve Joomla gibi PHP tabanl\u0131 \u00fcr\u00fcnlerde g\u00f6sterildi\u011fini bildirdi. Ancak bu durum, t\u00fcm sitelerin sald\u0131r\u0131ya u\u011frad\u0131\u011f\u0131 anlam\u0131na gelmiyor.<\/p>\n
G\u00fcvenlik g\u00fcncellemeleri yay\u0131mland\u0131<\/p>\n
PHP ekibi, a\u00e7\u0131klar\u0131 gidermek i\u00e7in PHP 8.5.12, 8.4.27, 8.3.36 ve 8.2.35 s\u00fcr\u00fcmlerini yay\u0131mlad\u0131. PHP 8.1 ve daha eski s\u00fcr\u00fcmleri kullanan sistemlerde ise sa\u011flay\u0131c\u0131n\u0131n g\u00fcvenlik yamas\u0131 sunup sunmad\u0131\u011f\u0131 kontrol edilmeli; gerekli d\u00fczeltme bulunmuyorsa desteklenen bir s\u00fcr\u00fcme ge\u00e7ilmeli.<\/p>\n
G\u00fcncelleme s\u0131ras\u0131nda yaln\u0131zca komut sat\u0131r\u0131nda g\u00f6r\u00fcnen s\u00fcr\u00fcm de\u011fil, web sunucusunun kulland\u0131\u011f\u0131 PHP \u00e7al\u0131\u015fma ortam\u0131 da kontrol edilmeli. Ayn\u0131 sunucuda farkl\u0131 siteler farkl\u0131 PHP s\u00fcr\u00fcmlerini kullanabiliyor.<\/p>\n
G\u00fcvenlik yamas\u0131n\u0131n uygulanmas\u0131 riski azalt\u0131rken daha \u00f6nce ger\u00e7ekle\u015fmi\u015f olas\u0131 sald\u0131r\u0131lar\u0131 veya zararl\u0131 dosyalar\u0131 ortadan kald\u0131rm\u0131yor. Bu nedenle g\u00fcncelleme sonras\u0131nda sunucu kay\u0131tlar\u0131, \u015f\u00fcpheli dosyalar ve yetkisiz hesaplar da incelenmeli. WordPress \u00e7ekirde\u011fi, temalar ve eklentiler ile sunucudaki di\u011fer yaz\u0131l\u0131mlar\u0131n g\u00fcncel tutulmas\u0131 da \u00f6nem ta\u015f\u0131yor.<\/p>\n
<\/strong> PHP altyap\u0131s\u0131nda tespit edilen iki kritik g\u00fcvenlik a\u00e7\u0131\u011f\u0131, internet siteleri i\u00e7in risk olu\u015fturuyor. <\/p>\n","protected":false},"author":1,"featured_media":171614,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"googlesitekit_rrm_CAow07ekDA:productID":"","footnotes":""},"categories":[13],"tags":[],"class_list":["post-171613","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-teknoloji"],"_links":{"self":[{"href":"https:\/\/ekonomigundemi.com.tr\/index.php\/wp-json\/wp\/v2\/posts\/171613","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ekonomigundemi.com.tr\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ekonomigundemi.com.tr\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ekonomigundemi.com.tr\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ekonomigundemi.com.tr\/index.php\/wp-json\/wp\/v2\/comments?post=171613"}],"version-history":[{"count":0,"href":"https:\/\/ekonomigundemi.com.tr\/index.php\/wp-json\/wp\/v2\/posts\/171613\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ekonomigundemi.com.tr\/index.php\/wp-json\/wp\/v2\/media\/171614"}],"wp:attachment":[{"href":"https:\/\/ekonomigundemi.com.tr\/index.php\/wp-json\/wp\/v2\/media?parent=171613"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ekonomigundemi.com.tr\/index.php\/wp-json\/wp\/v2\/categories?post=171613"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ekonomigundemi.com.tr\/index.php\/wp-json\/wp\/v2\/tags?post=171613"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\nEKONOM\u0130 GAZETES\u0130 <\/p>\n","protected":false},"excerpt":{"rendered":"