Sherrod DeGrippo

“Whether or not there are current, active exploits is only a matter of time.”

Sherrod DeGrippo · said 2026-10-22 · reported 2026-10-22

DeGrippo warned that active exploitation of the PHP vulnerabilities was likely only a matter of time.

“We have seen over 200 examples of proofs-of-concept exploit code, and we’re actively investigating them all,”

Sherrod DeGrippo · said 2026-10-22 · reported 2026-10-22

DeGrippo said her team had identified over 200 proofs-of-concept exploit code examples and was actively investigating them.

“We have not yet seen these PHP vulnerabilities exploited in the wild yet,”

Sherrod DeGrippo · said 2026-10-22 · reported 2026-10-22

DeGrippo confirmed that as of Thursday evening, no successful exploitation of the PHP vulnerabilities had been observed in the wild.