BNB Chain confirms network unaffected by PHP2Shell vulnerabilities
Summary
BNB Chain has confirmed that its technology stack does not utilize PHP, stating that its network and core infrastructure remain unaffected by the recently disclosed PHP2Shell vulnerabilities, which involve critical issues in PHP that allow for unauthenticated remote code execution. In light of these vulnerabilities, many blockchain projects, including BNB Chain, are reassuring their communities and urging them to remain vigilant about security practices.
Tokens
$BNB
Analysis
BNB Chain: BNB Chain operates as a blockchain network designed to support decentralized applications and smart contracts with a focus on scalability and developer tools. In the context of the recent PHP2Shell vulnerability disclosures, BNB Chain has issued a statement confirming that its technology stack does not incorporate PHP, ensuring its network and infrastructure remain unaffected. Security Response: Blockchain projects are issuing public statements clarifying their technology stacks in response to the PHP vulnerabilities and related advisories from security organizations. Vulnerability Details: PHP2Shell refers to two critical vulnerabilities in PHP core (CVE-2026-109618 and CVE-2026-109619) disclosed in October 2026 that enable unauthenticated remote code execution on affected web servers.
Categories
crypto
Related sources
- https://x.com/BNC4bnb/status/2113029535361118552
- https://www.securityweek.com/php2shell-patches-land-as-first-exploitation-attempts-hit-sensors/
- https://x.com/Naksh005/status/2113108119735660569
- https://www.helpnetsecurity.com/2026/10/21/php2shell-php-vulnerabilities-patched-cve-2026-109618-cve-2026-109619/
- https://www.kucoin.com/zh-hant/news/flash/bnb-chain-executive-confirms-no-php-usage-amid-security-warnings
- https://hadrian.io/vulnerability-alerts/php2shell-leaked-critical-php-rce-cve-2026-109618-cve-2026-109619
- https://sansec.io/research/php2shell
- https://research.jfrog.com/post/php2shell-all-you-need-to-know-about-cve-2026-109618-and-cve-2026-109619/
- https://www.theregister.com/security/2026/10/22/php-blames-supply-chain-security-biz-chainguard-for-putting-huge-chunks-of-the-web-at-risk/5304611
- https://x.com/v_bnbchain/status/2113107276215284143