{"id":14,"date":"2026-10-21T20:59:29","date_gmt":"2026-10-21T20:59:29","guid":{"rendered":"https:\/\/adnancanturk.com\/blog\/php2shell-yama-gunu-php-nodejs-cloudlinux-cpanel-rehberi\/"},"modified":"2026-10-23T09:50:30","modified_gmt":"2026-10-23T09:50:30","slug":"php2shell-yama-gunu-php-nodejs-cloudlinux-cpanel-rehberi","status":"publish","type":"post","link":"https:\/\/adnancanturk.com\/blog\/php2shell-yama-gunu-php-nodejs-cloudlinux-cpanel-rehberi\/","title":{"rendered":"PHP2Shell yama g\u00fcn\u00fc: PHP, Node.js, CloudLinux ve cPanel sunucular\u0131 i\u00e7in uygulama rehberi"},"content":{"rendered":"<p class=\"lead\">21 Ekim 2026, PHP \u00e7al\u0131\u015ft\u0131ran neredeyse her sunucu i\u00e7in bir yama g\u00fcn\u00fcyd\u00fc. PHP projesi art\u0131k PHP2Shell olarak bilinen iki kritik a\u00e7\u0131k i\u00e7in acil d\u00fczeltmeler yay\u0131mlad\u0131, Node.js birka\u00e7 saat arayla kendi g\u00fcvenlik s\u00fcr\u00fcm\u00fcn\u00fc \u00e7\u0131kard\u0131 ve d\u00fczeltmeleri geriye ta\u015f\u0131nm\u0131\u015f EasyApache 4 paketleri ayn\u0131 \u00f6\u011fleden sonra cPanel ve CloudLinux sunucular\u0131na ula\u015ft\u0131. Bu yaz\u0131, uygulamay\u0131 yazan de\u011fil altyap\u0131y\u0131 i\u015fleten herkes i\u00e7in, bizim kulland\u0131\u011f\u0131m\u0131z uygulama rehberi.<\/p>\n<div class=\"tldr\">\n<p class=\"tldr-label\">TL;DR<\/p>\n<ul>\n<li>PHP2Shell, CVE-2026-109618 ve CVE-2026-109619&#8217;dur: uygulama kodu \u00e7al\u0131\u015fmadan \u00f6nce devreye giren, kimlik do\u011frulamas\u0131 \u00f6ncesi iki hata, ikisi de 9.2 puanl\u0131.<\/li>\n<li>Ana projede PHP 8.2.35, 8.3.36, 8.4.27 ve 8.5.12 ile d\u00fczeltildi; cPanel EasyApache 4, ea-php72 ile ea-php85 aras\u0131 i\u00e7in s\u00fcr\u00fcm numaralar\u0131n\u0131 de\u011fi\u015ftirmeden geriye ta\u015f\u0131nm\u0131\u015f yamalar yay\u0131mlad\u0131.<\/li>\n<li>Ayn\u0131 g\u00fcn Node.js 22.23.4, 24.22.1 ve 26.12.1 \u00e7\u0131kt\u0131; aralar\u0131nda uzaktan kod \u00e7al\u0131\u015ft\u0131rmaya izin veren bir Brotli \u00e7\u00f6z\u00fcc\u00fc hatas\u0131n\u0131n da bulundu\u011fu on CVE&#8217;yi d\u00fczeltiyor.<\/li>\n<li>Paket de\u011fi\u015fiklik g\u00fcnl\u00fc\u011f\u00fcyle do\u011frulay\u0131n, PHP y\u00fcklemi\u015f her s\u00fcreci yeniden ba\u015flat\u0131n ve hi\u00e7bir s\u00fcrecin silinmi\u015f PHP k\u00fct\u00fcphanelerini belle\u011fe e\u015flemedi\u011fini kontrol edin.<\/li>\n<li><code>session.upload_progress.enabled = 0<\/code> ve WAF kurallar\u0131 zaman kazand\u0131r\u0131r; sorunu yaln\u0131zca g\u00fcncelleme \u00e7\u00f6zer.<\/li>\n<\/ul>\n<\/div>\n<h2>PHP2Shell neden farkl\u0131<\/h2>\n<p>CVE-2026-109618 ve CVE-2026-109619&#8217;un ikisi de CVSS v4.0&#8217;da 9.2 puan ald\u0131 ve ayr\u0131nt\u0131lar bu puan\u0131 a\u00e7\u0131kl\u0131yor. Birincisi bir bellek yetersizli\u011fi hatas\u0131: PHP, istek verisi yar\u0131 yar\u0131ya haz\u0131rlanm\u0131\u015fken kesintiye u\u011frayabiliyor ve ard\u0131ndan gelen temizlik bozuk veriyi ge\u00e7erliymi\u015f gibi i\u015fliyor. \u0130kincisi bayat genel durum (stale global state): bir iste\u011fe ait veri, belle\u011fi serbest b\u0131rak\u0131ld\u0131ktan sonra da ya\u015famaya devam ediyor ve ayn\u0131 i\u015f\u00e7ideki bir sonraki istek, ba\u015flatma onu s\u0131f\u0131rlamadan \u00f6nce bu veriyi kullan\u0131yor.<\/p>\n<p>\u00dc\u00e7 \u00f6zellik bunu bir uygulama sorunu de\u011fil, bar\u0131nd\u0131rma sorunu yap\u0131yor. Giri\u015f yapmak gerekmiyor. Sald\u0131r\u0131, uygulama kodu \u00e7al\u0131\u015fmadan \u00f6nce, istek ayr\u0131\u015ft\u0131r\u0131l\u0131rken ger\u00e7ekle\u015fiyor; yani s\u0131k\u0131la\u015ft\u0131r\u0131lm\u0131\u015f bir WordPress ya da kat\u0131 bir framework i\u015fe yaram\u0131yor. Ve her web SAPI&#8217;si etkileniyor: PHP-FPM, mod_php&#8217;li Apache, php-cgi, LiteSpeed ve FrankenPHP; en y\u00fcksek risk mod_php&#8217;de. Ayr\u0131nt\u0131lar planlanan a\u00e7\u0131klama tarihinden \u00f6nce s\u0131zd\u0131, \u00e7al\u0131\u015fan bir istismar g\u00f6sterildi ve Cloudflare bilinen sald\u0131r\u0131 yollar\u0131 i\u00e7in t\u00fcm planlarda WAF kurallar\u0131 devreye ald\u0131. Birle\u015fik Krall\u0131k NCSC, yamalanamayan sistemlerin \u00e7evrim d\u0131\u015f\u0131 al\u0131nmas\u0131n\u0131 \u00f6neriyor. Aktif olarak istismar ediliyormu\u015f gibi davran\u0131n.<\/p>\n<figure class=\"wp-block-image size-full gitm-figure\"><svg role=\"img\" aria-label=\"PHP2Shell uygulama rehberi: 21 Ekim 2026 g\u00fcncellemelerinden \u00f6nce, s\u0131ras\u0131nda ve sonra\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 1600 800\"><rect width=\"1600\" height=\"800\" fill=\"#fff\"\/><text x=\"80\" y=\"80\" font-family=\"Arial, Helvetica, sans-serif\" font-size=\"40\" font-weight=\"700\" letter-spacing=\"-1.5\" fill=\"#171717\" text-anchor=\"start\">PHP2Shell uygulama rehberi<\/text><text x=\"80\" y=\"122\" font-family=\"Menlo, monospace\" font-size=\"18\" font-weight=\"400\" letter-spacing=\"2\" fill=\"#858585\" text-anchor=\"start\">21 EK\u0130M G\u00dcNCELLEMELER\u0130NDEN \u00d6NCE, SIRASINDA VE SONRA<\/text><path d=\"M80 200H1520\" stroke=\"#e8e5df\" stroke-width=\"3\"\/><path d=\"M80 200H1520\" stroke=\"#f05a28\" stroke-width=\"7\" stroke-dasharray=\"440 40\"\/><circle cx=\"80\" cy=\"200\" r=\"12\" fill=\"#fff\" stroke=\"#f05a28\" stroke-width=\"5\"\/><text x=\"80\" y=\"270\" font-family=\"Menlo, monospace\" font-size=\"22\" font-weight=\"700\" letter-spacing=\"3\" fill=\"#171717\" text-anchor=\"start\">01  \u00d6NCE<\/text><line x1=\"80\" y1=\"300\" x2=\"510\" y2=\"300\" stroke=\"#e8e5df\" stroke-width=\"2\"\/><rect x=\"80\" y=\"324\" width=\"10\" height=\"10\" fill=\"#f05a28\"\/><text x=\"106\" y=\"334\" font-family=\"Arial, Helvetica, sans-serif\" font-size=\"23\" font-weight=\"400\" letter-spacing=\"0\" fill=\"#171717\" text-anchor=\"start\">Her PHP ikilisini listeleyin<\/text><line x1=\"80\" y1=\"378\" x2=\"510\" y2=\"378\" stroke=\"#e8e5df\" stroke-width=\"2\"\/><rect x=\"80\" y=\"402\" width=\"10\" height=\"10\" fill=\"#f05a28\"\/><text x=\"106\" y=\"412\" font-family=\"Arial, Helvetica, sans-serif\" font-size=\"23\" font-weight=\"400\" letter-spacing=\"0\" fill=\"#171717\" text-anchor=\"start\">upload_progress.enabled = 0<\/text><line x1=\"80\" y1=\"456\" x2=\"510\" y2=\"456\" stroke=\"#e8e5df\" stroke-width=\"2\"\/><rect x=\"80\" y=\"480\" width=\"10\" height=\"10\" fill=\"#f05a28\"\/><text x=\"106\" y=\"490\" font-family=\"Arial, Helvetica, sans-serif\" font-size=\"23\" font-weight=\"400\" letter-spacing=\"0\" fill=\"#171717\" text-anchor=\"start\">memory_limit = -1 olmas\u0131n<\/text><line x1=\"80\" y1=\"534\" x2=\"510\" y2=\"534\" stroke=\"#e8e5df\" stroke-width=\"2\"\/><rect x=\"80\" y=\"558\" width=\"10\" height=\"10\" fill=\"#f05a28\"\/><text x=\"106\" y=\"568\" font-family=\"Arial, Helvetica, sans-serif\" font-size=\"23\" font-weight=\"400\" letter-spacing=\"0\" fill=\"#171717\" text-anchor=\"start\">WAF: Imunify360 8.83, Cloudflare<\/text><line x1=\"80\" y1=\"612\" x2=\"510\" y2=\"612\" stroke=\"#e8e5df\" stroke-width=\"2\"\/><rect x=\"80\" y=\"636\" width=\"10\" height=\"10\" fill=\"#f05a28\"\/><text x=\"106\" y=\"646\" font-family=\"Arial, Helvetica, sans-serif\" font-size=\"23\" font-weight=\"400\" letter-spacing=\"0\" fill=\"#171717\" text-anchor=\"start\">Dosya ve \u00e7\u00f6kme referans\u0131 al\u0131n<\/text><circle cx=\"570\" cy=\"200\" r=\"12\" fill=\"#fff\" stroke=\"#f05a28\" stroke-width=\"5\"\/><text x=\"570\" y=\"270\" font-family=\"Menlo, monospace\" font-size=\"22\" font-weight=\"700\" letter-spacing=\"3\" fill=\"#171717\" text-anchor=\"start\">02  YAMA<\/text><line x1=\"570\" y1=\"300\" x2=\"1000\" y2=\"300\" stroke=\"#e8e5df\" stroke-width=\"2\"\/><rect x=\"570\" y=\"324\" width=\"10\" height=\"10\" fill=\"#f05a28\"\/><text x=\"596\" y=\"334\" font-family=\"Arial, Helvetica, sans-serif\" font-size=\"23\" font-weight=\"400\" letter-spacing=\"0\" fill=\"#171717\" text-anchor=\"start\">PHP 8.2.35 \u00b7 8.3.36<\/text><line x1=\"570\" y1=\"378\" x2=\"1000\" y2=\"378\" stroke=\"#e8e5df\" stroke-width=\"2\"\/><rect x=\"570\" y=\"402\" width=\"10\" height=\"10\" fill=\"#f05a28\"\/><text x=\"596\" y=\"412\" font-family=\"Arial, Helvetica, sans-serif\" font-size=\"23\" font-weight=\"400\" letter-spacing=\"0\" fill=\"#171717\" text-anchor=\"start\">PHP 8.4.27 \u00b7 8.5.12<\/text><line x1=\"570\" y1=\"456\" x2=\"1000\" y2=\"456\" stroke=\"#e8e5df\" stroke-width=\"2\"\/><rect x=\"570\" y=\"480\" width=\"10\" height=\"10\" fill=\"#f05a28\"\/><text x=\"596\" y=\"490\" font-family=\"Arial, Helvetica, sans-serif\" font-size=\"23\" font-weight=\"400\" letter-spacing=\"0\" fill=\"#171717\" text-anchor=\"start\">cPanel ea-php72-85 geri ta\u015f\u0131ma<\/text><line x1=\"570\" y1=\"534\" x2=\"1000\" y2=\"534\" stroke=\"#e8e5df\" stroke-width=\"2\"\/><rect x=\"570\" y=\"558\" width=\"10\" height=\"10\" fill=\"#f05a28\"\/><text x=\"596\" y=\"568\" font-family=\"Arial, Helvetica, sans-serif\" font-size=\"23\" font-weight=\"400\" letter-spacing=\"0\" fill=\"#171717\" text-anchor=\"start\">CloudLinux alt-php: OS baz\u0131nda<\/text><line x1=\"570\" y1=\"612\" x2=\"1000\" y2=\"612\" stroke=\"#e8e5df\" stroke-width=\"2\"\/><rect x=\"570\" y=\"636\" width=\"10\" height=\"10\" fill=\"#f05a28\"\/><text x=\"596\" y=\"646\" font-family=\"Arial, Helvetica, sans-serif\" font-size=\"23\" font-weight=\"400\" letter-spacing=\"0\" fill=\"#171717\" text-anchor=\"start\">Node 22.23.4 \u00b7 24.22.1 \u00b7 26.12.1<\/text><circle cx=\"1060\" cy=\"200\" r=\"12\" fill=\"#fff\" stroke=\"#f05a28\" stroke-width=\"5\"\/><text x=\"1060\" y=\"270\" font-family=\"Menlo, monospace\" font-size=\"22\" font-weight=\"700\" letter-spacing=\"3\" fill=\"#171717\" text-anchor=\"start\">03  SONRA<\/text><line x1=\"1060\" y1=\"300\" x2=\"1490\" y2=\"300\" stroke=\"#e8e5df\" stroke-width=\"2\"\/><rect x=\"1060\" y=\"324\" width=\"10\" height=\"10\" fill=\"#f05a28\"\/><text x=\"1086\" y=\"334\" font-family=\"Arial, Helvetica, sans-serif\" font-size=\"23\" font-weight=\"400\" letter-spacing=\"0\" fill=\"#171717\" text-anchor=\"start\">php -v de\u011fil, changelog ile do\u011frulay\u0131n<\/text><line x1=\"1060\" y1=\"378\" x2=\"1490\" y2=\"378\" stroke=\"#e8e5df\" stroke-width=\"2\"\/><rect x=\"1060\" y=\"402\" width=\"10\" height=\"10\" fill=\"#f05a28\"\/><text x=\"1086\" y=\"412\" font-family=\"Arial, Helvetica, sans-serif\" font-size=\"23\" font-weight=\"400\" letter-spacing=\"0\" fill=\"#171717\" text-anchor=\"start\">FPM, Apache, lsphp, i\u015f\u00e7iler yeniden<\/text><line x1=\"1060\" y1=\"456\" x2=\"1490\" y2=\"456\" stroke=\"#e8e5df\" stroke-width=\"2\"\/><rect x=\"1060\" y=\"480\" width=\"10\" height=\"10\" fill=\"#f05a28\"\/><text x=\"1086\" y=\"490\" font-family=\"Arial, Helvetica, sans-serif\" font-size=\"23\" font-weight=\"400\" letter-spacing=\"0\" fill=\"#171717\" text-anchor=\"start\">&#x27;(deleted)&#x27; PHP e\u015flemesi kalmas\u0131n<\/text><line x1=\"1060\" y1=\"534\" x2=\"1490\" y2=\"534\" stroke=\"#e8e5df\" stroke-width=\"2\"\/><rect x=\"1060\" y=\"558\" width=\"10\" height=\"10\" fill=\"#f05a28\"\/><text x=\"1086\" y=\"568\" font-family=\"Arial, Helvetica, sans-serif\" font-size=\"23\" font-weight=\"400\" letter-spacing=\"0\" fill=\"#171717\" text-anchor=\"start\">Web shell ve cron taramas\u0131<\/text><line x1=\"1060\" y1=\"612\" x2=\"1490\" y2=\"612\" stroke=\"#e8e5df\" stroke-width=\"2\"\/><rect x=\"1060\" y=\"636\" width=\"10\" height=\"10\" fill=\"#f05a28\"\/><text x=\"1086\" y=\"646\" font-family=\"Arial, Helvetica, sans-serif\" font-size=\"23\" font-weight=\"400\" letter-spacing=\"0\" fill=\"#171717\" text-anchor=\"start\">Ge\u00e7ici ayarlar\u0131 geri al\u0131n<\/text><text x=\"80\" y=\"770\" font-family=\"Menlo, monospace\" font-size=\"15\" font-weight=\"400\" letter-spacing=\"2\" fill=\"#858585\" text-anchor=\"start\">KAYNAK: PHP.NET, NODEJS.ORG, CPANEL EA4 CHANGELOG<\/text><\/svg><figcaption>PHP2Shell uygulama rehberi: 21 Ekim 2026 g\u00fcncellemelerinden \u00f6nce, s\u0131ras\u0131nda ve sonra<\/figcaption><\/figure>\n<h2>21 Ekim&#8217;de neler yamaland\u0131<\/h2>\n<div class=\"table-wrap\">\n<table>\n<thead>\n<tr>\n<th>Bile\u015fen<\/th>\n<th>D\u00fczeltilmi\u015f s\u00fcr\u00fcmler<\/th>\n<th>Notlar<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>PHP (php.net)<\/td>\n<td>8.2.35, 8.3.36, 8.4.27, 8.5.12<\/td>\n<td>PHP2Shell; 7.4, 8.0 ve 8.1 i\u00e7in k\u00fc\u00e7\u00fck kaynak kod yamalar\u0131 yay\u0131mland\u0131<\/td>\n<\/tr>\n<tr>\n<td>CloudLinux \u00fczerinde cPanel EasyApache 4<\/td>\n<td>ea-php72 ile ea-php85 aras\u0131, yeni paket eki<\/td>\n<td>Geriye ta\u015f\u0131nm\u0131\u015f d\u00fczeltme, ana s\u00fcr\u00fcm numaras\u0131 de\u011fi\u015fmedi (\u00f6rne\u011fin 8.4.26-2.cloudlinux.1)<\/td>\n<\/tr>\n<tr>\n<td>CloudLinux alt-php<\/td>\n<td>\u0130\u015fletim sistemine g\u00f6re kademeli<\/td>\n<td>CloudLinux durum sayfas\u0131n\u0131 izleyin; ge\u00e7ici koruma olarak Imunify360 kurallar\u0131<\/td>\n<\/tr>\n<tr>\n<td>Node.js<\/td>\n<td>22.23.4, 24.22.1, 26.12.1<\/td>\n<td>On CVE, d\u00f6rd\u00fc y\u00fcksek; aralar\u0131nda uzaktan kod \u00e7al\u0131\u015ft\u0131rmaya izin veren bir Brotli \u00e7\u00f6z\u00fcc\u00fc s\u0131n\u0131r d\u0131\u015f\u0131 yazma hatas\u0131 var<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<p>Node.js s\u00fcr\u00fcm\u00fcn\u00fcn etki alan\u0131 daha dar ama ciddiyeti daha az de\u011fil. CVE-2026-111497, \u00fc\u00e7 hatta da Brotli \u00e7\u00f6z\u00fcc\u00fcs\u00fcnde s\u0131n\u0131r d\u0131\u015f\u0131 yazma hatas\u0131; CVE-2026-106069 ve CVE-2026-105483, gev\u015fek ayr\u0131\u015ft\u0131r\u0131lan ya da tam geni\u015flikli (fullwidth) yaz\u0131lm\u0131\u015f IP adresleri \u00fczerinden TLS ana bilgisayar ad\u0131 do\u011frulamas\u0131n\u0131 atlat\u0131yor; CVE-2026-105482 ise <code>dns.resolve<\/code> i\u00e7inde adlar\u0131 NUL karakterinde kesiyor. G\u00f6m\u00fcl\u00fc c-ares, OpenSSL ve Undici g\u00fcncellendi, sertifika deposundan da ele ge\u00e7irilen bir eMudhra ara sertifikas\u0131 \u00e7\u0131kar\u0131ld\u0131.<\/p>\n<p>Bir derlemeyi d\u00fczeltilmi\u015f s\u00fcr\u00fcmlerle kar\u015f\u0131la\u015ft\u0131r\u0131n:<\/p>\n<div class=\"gitm-widget\" data-widget=\"php2shell\"><\/div>\n<h2>Hangi PHP kurulumlar\u0131 en a\u00e7\u0131k durumda?<\/h2>\n<p>PHP&#8217;yi web \u00fczerinden sunman\u0131n her yolu etkileniyor, ancak duyuru en y\u00fcksek riski mod_php&#8217;ye veriyor; g\u00fcncellemeden sonra her kurulumun nas\u0131l yeniden ba\u015flat\u0131ld\u0131\u011f\u0131 da eski kodun ne kadar s\u00fcre \u00e7al\u0131\u015fmaya devam edece\u011fini belirliyor. A\u015fa\u011f\u0131daki tablo, yeniden ba\u015flatmalar\u0131 planlarken kulland\u0131\u011f\u0131m\u0131z s\u00fcr\u00fcm.<\/p>\n<div class=\"table-wrap\">\n<table>\n<thead>\n<tr>\n<th>PHP nas\u0131l sunuluyor<\/th>\n<th>Maruziyet<\/th>\n<th>D\u00fczeltmenin devreye girmesi i\u00e7in<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>mod_php&#8217;li Apache<\/td>\n<td>PHP duyurusuna g\u00f6re en y\u00fcksek<\/td>\n<td>Apache&#8217;nin tamamen yeniden ba\u015flat\u0131lmas\u0131; graceful yeniden y\u00fckleme yetmez<\/td>\n<\/tr>\n<tr>\n<td>PHP-FPM (cPanel, d\u00fcz Apache ya da nginx)<\/td>\n<td>Etkileniyor<\/td>\n<td>Her havuzun yeni i\u015f\u00e7i s\u00fcre\u00e7leri ba\u015flatmas\u0131 i\u00e7in FPM servisini yeniden ba\u015flat\u0131n ya da yeniden y\u00fckleyin<\/td>\n<\/tr>\n<tr>\n<td>CGI i\u015fleyicisi (suPHP tarz\u0131 ya da <code>\/cgi-sys\/<\/code>)<\/td>\n<td>Etkileniyor<\/td>\n<td>Her istek yeni bir s\u00fcre\u00e7 ba\u015flatt\u0131\u011f\u0131 i\u00e7in yeni ikili dosya hemen kullan\u0131l\u0131r<\/td>\n<\/tr>\n<tr>\n<td>lsphp&#8217;li LiteSpeed<\/td>\n<td>Etkileniyor<\/td>\n<td>lsphp paketlerini g\u00fcncelleyin, ard\u0131ndan \u00e7al\u0131\u015fan lsphp s\u00fcre\u00e7lerini durdurun<\/td>\n<\/tr>\n<tr>\n<td>FrankenPHP, Octane, Swoole, RoadRunner<\/td>\n<td>Etkileniyor<\/td>\n<td>\u0130kili dosyay\u0131 ya da imaj\u0131 de\u011fi\u015ftirin ve uzun s\u00fcre \u00e7al\u0131\u015fan sunucuyu yeniden ba\u015flat\u0131n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<p>Payla\u015f\u0131ml\u0131 bir sunucu \u00e7o\u011fu zaman bunlar\u0131n birka\u00e7\u0131n\u0131 bir arada bar\u0131nd\u0131r\u0131r. Karma bir sunucuda CGI ile sunulan siteler yamal\u0131 ikili dosyay\u0131 bir sonraki istekte al\u0131rken FPM havuzlar\u0131 yeniden ba\u015flayana kadar eskisini kullanmaya devam eder; a\u015fa\u011f\u0131daki bayat s\u00fcre\u00e7 kontrol\u00fcn\u00fcn \u00f6nemli olmas\u0131n\u0131n nedeni bu farkt\u0131r.<\/p>\n<h2>Bir cPanel ve CloudLinux sunucusundan saha notu<\/h2>\n<p>cPanel 11.138 \u00e7al\u0131\u015ft\u0131ran CloudLinux 8 sunucular\u0131m\u0131zdan birinde EasyApache 4 g\u00fcncellemeleri 21 Ekim&#8217;de sunucu saatiyle 16:16&#8217;da kendili\u011finden kuruldu ve 7.2&#8217;den 8.5&#8217;e kadar her ea-php s\u00fcr\u00fcm\u00fcn\u00fc kapsad\u0131. \u0130ki ayr\u0131nt\u0131 \u00f6nemli. Birincisi, d\u00fczeltme geriye ta\u015f\u0131nd\u0131\u011f\u0131 i\u00e7in <code>php -v<\/code> h\u00e2l\u00e2 8.4.26 g\u00f6steriyordu; kan\u0131t paket de\u011fi\u015fiklik g\u00fcnl\u00fc\u011f\u00fcnde, her derleme CVE-2026-109618 ve CVE-2026-109619&#8217;u listeliyor. \u0130kincisi, her PHP s\u00fcreci yeniden ba\u015flayana kadar g\u00fcncelleme i\u015fin yaln\u0131zca yar\u0131s\u0131; bunu varsaymak yerine kontrol etmek gerekiyor.<\/p>\n<h2>Yamadan \u00f6nce: g\u00fcvenle zaman kazan\u0131n<\/h2>\n<ol class=\"checklist\">\n<li><strong>Her PHP ikili dosyas\u0131n\u0131 listeleyin.<\/strong> ea-php, alt-php, da\u011f\u0131t\u0131m PHP&#8217;si, LiteSpeed lsphp, Docker imajlar\u0131 ve bir uygulamayla birlikte gelen her \u015fey. Her biri ayr\u0131 bir yama demek.<\/li>\n<li><strong>G\u00fcvenli oldu\u011fu yerde upload progress&#8217;i kapat\u0131n.<\/strong> <code>php.ini<\/code> i\u00e7inde ya da FPM havuzunda <code>php_admin_value<\/code> ile <code>session.upload_progress.enabled = 0<\/code> yap\u0131n, ard\u0131ndan i\u015f\u00e7ileri yeniden ba\u015flat\u0131n. Bu yaln\u0131zca CVE-2026-109619&#8217;un do\u011frulanm\u0131\u015f oturum yolunu kapat\u0131r; <code>ini_set()<\/code> ve <code>.user.ini<\/code> \u00e7ok ge\u00e7 devreye girer.<\/li>\n<li><strong><code>memory_limit = -1<\/code> ayar\u0131n\u0131 kald\u0131r\u0131n.<\/strong> S\u0131n\u0131rs\u0131z bellek, CVE-2026-109618&#8217;in bellek yetersizli\u011fi yoluna ula\u015fmay\u0131 kolayla\u015ft\u0131r\u0131r.<\/li>\n<li><strong>WAF korumas\u0131n\u0131 a\u00e7\u0131n.<\/strong> Imunify360 8.83 kural seti, Apache&#8217;de bilinen istismar bi\u00e7imini engelliyor; Cloudflare&#8217;in de y\u00f6netilen kurallar\u0131 var. \u0130kisi de ge\u00e7ici ve LiteSpeed&#8217;de Imunify360 kural\u0131 yaln\u0131zca kay\u0131t tutuyor.<\/li>\n<li><strong>Bir referans durumu al\u0131n.<\/strong> Son de\u011fi\u015ftirilen PHP dosyalar\u0131n\u0131 ve mevcut \u00e7\u00f6kme say\u0131lar\u0131n\u0131 kaydedin ki yamadan sonra kar\u015f\u0131la\u015ft\u0131rabilesiniz.<\/li>\n<\/ol>\n<h2>Yamadan sonra: kan\u0131tlay\u0131n<\/h2>\n<ol class=\"checklist\">\n<li><strong>S\u00fcr\u00fcm numaras\u0131yla de\u011fil, de\u011fi\u015fiklik g\u00fcnl\u00fc\u011f\u00fcyle do\u011frulay\u0131n.<\/strong> cPanel&#8217;de <code>rpm -q --changelog ea-php84-php-cli | head<\/code> iki CVE&#8217;yi de g\u00f6stermeli. php.net derlemelerinde 8.2.35, 8.3.36, 8.4.27 ya da 8.5.12 olup olmad\u0131\u011f\u0131na bak\u0131n.<\/li>\n<li><strong>PHP y\u00fcklemi\u015f her \u015feyi yeniden ba\u015flat\u0131n.<\/strong> PHP-FPM&#8217;i yeniden ba\u015flat\u0131n; mod_php i\u00e7in graceful yeniden y\u00fckleme yetmez, Apache&#8217;yi tamamen yeniden ba\u015flat\u0131n; LiteSpeed&#8217;de lsphp s\u00fcre\u00e7lerini sonland\u0131r\u0131n; kuyruk i\u015f\u00e7ilerini ve uzun s\u00fcre \u00e7al\u0131\u015fan servisleri yeniden ba\u015flat\u0131n.<\/li>\n<li><strong>Bayat s\u00fcre\u00e7leri aray\u0131n.<\/strong> <code>grep -lE '\/opt\/cpanel\/ea-php.*\\(deleted\\)$' \/proc\/[0-9]*\/maps<\/code> hi\u00e7bir \u015fey d\u00f6nd\u00fcrmemeli. Her e\u015fle\u015fme, h\u00e2l\u00e2 a\u00e7\u0131kl\u0131 kodu \u00e7al\u0131\u015ft\u0131ran bir s\u00fcre\u00e7 demek.<\/li>\n<li><strong>Node.js&#8217;i ayn\u0131 g\u00fcn g\u00fcncelleyin.<\/strong> Her servisi, konteyneri ve CI \u00e7al\u0131\u015ft\u0131r\u0131c\u0131s\u0131n\u0131 22.23.4, 24.22.1 ya da 26.12.1&#8217;e ta\u015f\u0131y\u0131n; art\u0131k d\u00fczeltme almayan Node.js 20&#8217;yi emekliye ay\u0131r\u0131n.<\/li>\n<li><strong>\u00d6nce taray\u0131n, sonra \u00f6nlemleri gev\u015fetin.<\/strong> Ge\u00e7ici WAF kurallar\u0131n\u0131 kald\u0131rmadan ve eski ayarlar\u0131n\u0131z\u0131 geri y\u00fcklemeden \u00f6nce yeni ya da de\u011fi\u015fmi\u015f PHP dosyalar\u0131n\u0131, web shell&#8217;leri ve beklenmedik cron girdilerini referans durumla kar\u015f\u0131la\u015ft\u0131r\u0131n.<\/li>\n<li><strong>S\u00fcr\u00fcm ge\u00e7i\u015flerini planlay\u0131n.<\/strong> PHP 8.1 ve \u00f6ncesi sat\u0131c\u0131lar\u0131n geriye ta\u015f\u0131d\u0131\u011f\u0131 yamalara ba\u011fl\u0131; PHP 8.2 de 31 Aral\u0131k 2026&#8217;da \u00f6mr\u00fcn\u00fc tamaml\u0131yor. Hedef olarak 8.4 ya da 8.5 se\u00e7in.<\/li>\n<\/ol>\n<h2>G\u00fcncelleme bir sunucu filosuna nas\u0131l yay\u0131l\u0131r?<\/h2>\n<p>Tek bir sunucuda g\u00fcncelleme, bir paket kurulumu ve bir yeniden ba\u015flatmadan ibaret. Bir filoda ise risk hatadan da\u011f\u0131t\u0131m\u0131n kendisine kayar: bir makinede sorunsuz \u00e7al\u0131\u015fan bir yap\u0131land\u0131rma ba\u015fka bir makinedeki siteyi bozabilir, yanl\u0131\u015f anda yap\u0131lan bir yeniden ba\u015flatma da istekleri d\u00fc\u015f\u00fcr\u00fcr. Biz her seferinde ayn\u0131 s\u0131ray\u0131 izliyoruz.<\/p>\n<ol class=\"checklist\">\n<li><strong>Bir kanarya sunucu se\u00e7in.<\/strong> Temsili bir site kar\u0131\u015f\u0131m\u0131 ta\u015f\u0131yan tek bir sunucuyu yamalay\u0131n, yeniden ba\u015flat\u0131n ve kontrol panelini ve \u00f6rnek siteleri \u00f6ncesi ve sonras\u0131yla kar\u015f\u0131la\u015ft\u0131r\u0131n.<\/li>\n<li><strong>\u00d6nceki durumu kaydedin.<\/strong> Her sunucu i\u00e7in kurulu paket s\u00fcr\u00fcmleri, her \u00f6rnek sitenin kulland\u0131\u011f\u0131 i\u015fleyici ve HTTP durum kodu. Bu olmadan bir gerilemeyi eski bir ar\u0131zadan ay\u0131rt edemezsiniz.<\/li>\n<li><strong>Sakin bir saatte yeniden ba\u015flat\u0131n.<\/strong> FPM&#8217;i yeniden ba\u015flatmak k\u0131sa s\u00fcrer, ancak mod_php i\u00e7in Apache&#8217;nin tamamen yeniden ba\u015flat\u0131lmas\u0131 o an s\u00fcren ba\u011flant\u0131lar\u0131 d\u00fc\u015f\u00fcr\u00fcr.<\/li>\n<li><strong>Do\u011frulay\u0131n, sonra ilerleyin.<\/strong> De\u011fi\u015fiklik g\u00fcnl\u00fc\u011f\u00fc kontrol\u00fc, bayat s\u00fcre\u00e7 kontrol\u00fc, \u00f6rnek siteler, ard\u0131ndan s\u0131radaki sunucu. Bir hata, nedeni anla\u015f\u0131lana kadar da\u011f\u0131t\u0131m\u0131 durdurur.<\/li>\n<\/ol>\n<p>EasyApache 4 otomatik g\u00fcncellemeleri a\u00e7\u0131k olan cPanel sunucular\u0131nda kurulum ad\u0131m\u0131, bizdeki gibi kendili\u011finden ger\u00e7ekle\u015fir; geriye i\u015f olarak yeniden ba\u015flatma ve do\u011frulama kal\u0131r. Otomatik g\u00fcncellemesi olmayan sunucularda kurulum ad\u0131m\u0131n\u0131n ayr\u0131ca planlanmas\u0131 gerekir ve unutulma ihtimali en y\u00fcksek olanlar da bunlard\u0131r.<\/p>\n<h2>Yamadan sonra hangi i\u015faretlere bakmal\u0131s\u0131n\u0131z?<\/h2>\n<p>Yama a\u00e7\u0131\u011f\u0131 kapat\u0131r, ama birinin ondan \u00f6nce a\u00e7\u0131\u011f\u0131 kullan\u0131p kullanmad\u0131\u011f\u0131n\u0131 s\u00f6ylemez. Ayr\u0131nt\u0131lar s\u00fcr\u00fcmden \u00f6nce s\u0131zd\u0131\u011f\u0131 i\u00e7in g\u00fcncellemenizden \u00f6nceki g\u00fcnleri k\u0131saca g\u00f6zden ge\u00e7irmeye de\u011fer. Ekim ortas\u0131ndan bu yana web k\u00f6k dizinlerinde olu\u015fturulmu\u015f ya da de\u011fi\u015ftirilmi\u015f ve hi\u00e7bir da\u011f\u0131t\u0131mla a\u00e7\u0131klanamayan PHP dosyalar\u0131na, bir sinyalle sonlanan i\u015f\u00e7ilerden s\u00f6z eden PHP-FPM g\u00fcnl\u00fck sat\u0131rlar\u0131na, a\u00e7\u0131klanamayan 500 ya da 502 yan\u0131t patlamalar\u0131na, web kullan\u0131c\u0131lar\u0131 i\u00e7in yeni cron girdilerine ve PHP s\u00fcre\u00e7lerinden tan\u0131d\u0131k olmayan sunuculara giden ba\u011flant\u0131lara bak\u0131n.<\/p>\n<p>Bunlar\u0131n hi\u00e7biri tek ba\u015f\u0131na bir s\u0131zmay\u0131 kan\u0131tlamaz ve temiz bir sonu\u00e7 da garanti de\u011fildir. Bir bulguyu bir incelemenin ba\u015flang\u0131c\u0131 olarak ele al\u0131n, yamadan \u00f6nce ald\u0131\u011f\u0131n\u0131z referans durumla kar\u015f\u0131la\u015ft\u0131r\u0131n ve inceleme bitene kadar ge\u00e7ici WAF kurallar\u0131n\u0131 yerinde tutun.<\/p>\n<p>2026&#8217;n\u0131n daha \u00f6nceki s\u00fcr\u00fcmlerinin arka plan\u0131 i\u00e7in <a href=\"\/blog\/php-nodejs-2026-guvenlik-surumleri-sunucu-kontrol-listesi\/\">PHP ve Node.js s\u00fcr\u00fcmlerine genel bak\u0131\u015f<\/a> yaz\u0131s\u0131na bak\u0131n; ayn\u0131 haftan\u0131n BIND ve Java g\u00fcncellemeleri <a href=\"\/blog\/nodejs-bind-java-ekim-2026-guvenlik-surumleri-sunucu-tarafi\/\">tek haftada Node.js, BIND ve Java<\/a> yaz\u0131s\u0131nda, \u00e7ekirdek taraf\u0131 ise <a href=\"\/blog\/paylasimli-linux-sunucu-cekirdek-sikilastirma-bes-ayar\/\">payla\u015f\u0131ml\u0131 bir Linux sunucu i\u00e7in be\u015f \u00e7ekirdek ayar\u0131<\/a> yaz\u0131s\u0131nda.<\/p>\n<h2 id=\"faq-php2shell-yama-gunu\">SSS: PHP2Shell ve 21 Ekim 2026 g\u00fcncellemeleri<\/h2>\n<h3 id=\"faq-php2shell-nedir-2026\">PHP2Shell nedir ve Ekim 2026&#8217;da neden acil olarak yamaland\u0131?<\/h3>\n<p>PHP2Shell, PHP&#8217;de CVSS v4.0&#8217;da 9.2 puan alan iki bellek g\u00fcvenli\u011fi hatas\u0131 olan CVE-2026-109618 ve CVE-2026-109619&#8217;a verilen ad. Giri\u015f gerektirmiyorlar ve uygulama kodu \u00e7al\u0131\u015fmadan \u00f6nce devreye giriyorlar. Ayr\u0131nt\u0131lar planlanan tarihten \u00f6nce s\u0131zd\u0131\u011f\u0131 i\u00e7in PHP d\u00fczeltmeleri 21 Ekim 2026&#8217;da yay\u0131mlad\u0131.<\/p>\n<h3 id=\"faq-php2shell-duzelten-php-surumleri\">Hangi PHP s\u00fcr\u00fcmleri PHP2Shell&#8217;i d\u00fczeltiyor, PHP 8.1 ve \u00f6ncesi ne olacak?<\/h3>\n<p>Ana projede d\u00fczeltilmi\u015f s\u00fcr\u00fcmler 8.2.35, 8.3.36, 8.4.27 ve 8.5.12. PHP 8.1 ve \u00f6ncesi i\u00e7in ana projeden yeni s\u00fcr\u00fcm \u00e7\u0131km\u0131yor; PHP ekibi 7.4, 8.0 ve 8.1 i\u00e7in k\u00fc\u00e7\u00fck kaynak kod yamalar\u0131 yay\u0131mlad\u0131 ve baz\u0131 sat\u0131c\u0131lar kendi yamal\u0131 paketlerini da\u011f\u0131t\u0131yor.<\/p>\n<h3 id=\"faq-cpanel-php-v-eski-surum-yamali\">cPanel PHP2Shell d\u00fczeltmesini kurduktan sonra php -v neden h\u00e2l\u00e2 eski s\u00fcr\u00fcm\u00fc g\u00f6steriyor?<\/h3>\n<p>\u00c7\u00fcnk\u00fc EasyApache 4 d\u00fczeltmeyi yeni bir PHP s\u00fcr\u00fcm\u00fc olarak de\u011fil, yeni bir paket eki ta\u015f\u0131yan geriye ta\u015f\u0131nm\u0131\u015f bir yama olarak da\u011f\u0131tt\u0131. Her <code>ea-php<\/code> paketinin de\u011fi\u015fiklik g\u00fcnl\u00fc\u011f\u00fc iki CVE&#8217;yi de listeliyor ve kan\u0131t <code>php -v<\/code> de\u011fil, bu de\u011fi\u015fiklik g\u00fcnl\u00fc\u011f\u00fc.<\/p>\n<h3 id=\"faq-mod-php-mi-php-fpm-mi-php2shell\">mod_php m\u0131 PHP-FPM mi: hangisi PHP2Shell&#8217;e kar\u015f\u0131 daha a\u00e7\u0131k durumda?<\/h3>\n<p>PHP duyurusu en y\u00fcksek riski, kar\u015f\u0131s\u0131nda \u00e7al\u0131\u015fan bir istismar g\u00f6sterilmi\u015f olan mod_php&#8217;ye veriyor. PHP-FPM de etkileniyor. Ne \u00e7al\u0131\u015ft\u0131r\u0131rsan\u0131z \u00e7al\u0131\u015ft\u0131r\u0131n, d\u00fczeltme ancak do\u011fru yeniden ba\u015flatmadan sonra ge\u00e7erli olur: mod_php i\u00e7in Apache&#8217;nin tamamen yeniden ba\u015flat\u0131lmas\u0131, havuzlar i\u00e7in FPM&#8217;in yeniden ba\u015flat\u0131lmas\u0131.<\/p>\n<h3 id=\"faq-upload-progress-onlemi-yeterli-mi\">session.upload_progress&#8217;i kapatmak, yama yapmadan PHP2Shell&#8217;i hafifletmek i\u00e7in yeterli mi?<\/h3>\n<p>Hay\u0131r. Yaln\u0131zca CVE-2026-109619&#8217;un do\u011frulanm\u0131\u015f oturum yolunu kapat\u0131r, CVE-2026-109618 i\u00e7in hi\u00e7bir \u015fey yapmaz. Bunu <code>ini_set()<\/code> ile de\u011fil, <code>php.ini<\/code> i\u00e7inde ya da FPM havuzunda ayarlay\u0131n ve g\u00fcncelleme kurulana kadar ge\u00e7ici bir \u00f6nlem olarak g\u00f6r\u00fcn.<\/p>\n<h3 id=\"faq-imunify360-litespeed-php2shell-korumasi\">Imunify360 kural\u0131 2026&#8217;da LiteSpeed sunucular\u0131n\u0131 PHP2Shell&#8217;e kar\u015f\u0131 koruyor mu?<\/h3>\n<p>Yaln\u0131zca k\u0131smen. Imunify360 8.83 kural seti Apache&#8217;de bilinen istismar bi\u00e7imini engelliyor, ancak LiteSpeed&#8217;de bu kal\u0131b\u0131 engellemek yerine yaln\u0131zca kaydediyor. Her iki sunucuda da bu ge\u00e7ici bir koruma, yamal\u0131 PHP&#8217;nin yerini tutmuyor.<\/p>\n<h3 id=\"faq-bayat-php-surecleri-kontrolu\">G\u00fcncellemeden sonra hi\u00e7bir s\u00fcrecin h\u00e2l\u00e2 yamas\u0131z PHP kodu \u00e7al\u0131\u015ft\u0131rmad\u0131\u011f\u0131n\u0131 nas\u0131l do\u011frulars\u0131n\u0131z?<\/h3>\n<p>Bellek e\u015flemelerinde silinmi\u015f PHP k\u00fct\u00fcphanelerini aray\u0131n: <code>grep -lE '\/opt\/cpanel\/ea-php.*\\(deleted\\)$' \/proc\/[0-9]*\/maps<\/code>. Bo\u015f sonu\u00e7, \u00e7al\u0131\u015fan her s\u00fcrecin yeni dosyalar\u0131 y\u00fckledi\u011fi anlam\u0131na gelir; her e\u015fle\u015fme h\u00e2l\u00e2 yeniden ba\u015flat\u0131lmas\u0131 gereken bir s\u00fcre\u00e7tir.<\/p>\n<h3 id=\"faq-cloudlinux-alt-php-php2shell-yamasi\">CloudLinux alt-php paketleri PHP2Shell i\u00e7in yamaland\u0131 m\u0131, yoksa yaln\u0131zca EasyApache ea-php mi?<\/h3>\n<p>ea-php yamalar\u0131 21 Ekim&#8217;de CloudLinux 8 sunucular\u0131na ula\u015ft\u0131. CloudLinux, alt-php paketlerinin i\u015fletim sistemine g\u00f6re kademeli olarak da\u011f\u0131t\u0131laca\u011f\u0131n\u0131 duyurdu ve durumlar\u0131n\u0131 durum sayfas\u0131nda listeledi; hesaplar\u0131n\u0131z\u0131n kulland\u0131\u011f\u0131 alt-php s\u00fcr\u00fcmleri i\u00e7in o sayfay\u0131 kontrol edin.<\/p>\n<h3 id=\"faq-ayni-gun-node-surumu-onceligi\">\u00d6nce PHP mi Node.js mi yamalanmal\u0131: 21 Ekim 2026 Node.js s\u00fcr\u00fcm\u00fc PHP2Shell&#8217;i beklemeli mi?<\/h3>\n<p>Hay\u0131r, ikisini paralel y\u00fcr\u00fct\u00fcn. Node.js s\u00fcr\u00fcm\u00fc, aralar\u0131nda uzaktan kod \u00e7al\u0131\u015ft\u0131rmaya izin veren bir Brotli \u00e7\u00f6z\u00fcc\u00fc hatas\u0131n\u0131n da bulundu\u011fu d\u00f6rt y\u00fcksek \u00f6nem dereceli sorunu d\u00fczeltti. Node.js&#8217;i g\u00fcncellemek PHP&#8217;ye dokunmaz, dolay\u0131s\u0131yla birini di\u011ferinin arkas\u0131nda bekletmek i\u00e7in bir neden yok.<\/p>\n<h3 id=\"faq-yama-oncesi-ele-gecirilme-kontrolu\">Bir sunucunun PHP2Shell yamas\u0131ndan \u00f6nce ele ge\u00e7irilip ge\u00e7irilmedi\u011fini nas\u0131l anlayabilirsiniz?<\/h3>\n<p>Tek bir test yok. Web k\u00f6k dizinlerinde a\u00e7\u0131klanamayan yeni PHP dosyalar\u0131n\u0131, FPM g\u00fcnl\u00fcklerinde \u00e7\u00f6ken i\u015f\u00e7ileri, ola\u011fand\u0131\u015f\u0131 500 ya da 502 patlamalar\u0131n\u0131, yeni cron girdilerini ve PHP&#8217;den d\u0131\u015far\u0131 giden ba\u011flant\u0131lar\u0131 inceleyin ve bunlar\u0131 bir referans durumla kar\u015f\u0131la\u015ft\u0131r\u0131n. Bir bulgu bir incelemeyi ba\u015flat\u0131r; temiz bir sonu\u00e7 ise kan\u0131t de\u011fil, yaln\u0131zca i\u00e7inizi rahatlat\u0131r.<\/p>\n<h2>Kaynaklar<\/h2>\n<ul class=\"sources\">\n<li><a href=\"https:\/\/www.php.net\/\" rel=\"noopener\" target=\"_blank\">PHP g\u00fcvenlik s\u00fcr\u00fcm\u00fc, 21 Ekim 2026<\/a>, php.net<\/li>\n<li><a href=\"https:\/\/github.com\/php\/php-src\/security\/advisories\/GHSA-w8hw-w9fx-j79w\" rel=\"noopener\" target=\"_blank\">GHSA-w8hw-w9fx-j79w (CVE-2026-109618)<\/a> ve <a href=\"https:\/\/github.com\/php\/php-src\/security\/advisories\/GHSA-6wmf-4rv5-p3rp\" rel=\"noopener\" target=\"_blank\">GHSA-6wmf-4rv5-p3rp (CVE-2026-109619)<\/a>, GitHub<\/li>\n<li><a href=\"https:\/\/nodejs.org\/en\/blog\/vulnerability\/october-2026-security-releases\" rel=\"noopener\" target=\"_blank\">Ekim 2026 g\u00fcvenlik s\u00fcr\u00fcmleri<\/a>, nodejs.org<\/li>\n<li><a href=\"https:\/\/www.helpnetsecurity.com\/2026\/10\/21\/php2shell-php-vulnerabilities-patched-cve-2026-109618-cve-2026-109619\/\" rel=\"noopener\" target=\"_blank\">PHP2Shell: kritik PHP a\u00e7\u0131klar\u0131 yamaland\u0131<\/a>, Help Net Security<\/li>\n<li><a href=\"https:\/\/blog.imunify360.com\/php-cve-2026-109618-cve-2026-109619\/\" rel=\"noopener\" target=\"_blank\">PHP2Shell i\u00e7in Imunify360 8.83 kural seti<\/a>, Imunify360<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>PHP, 21 Ekim 2026&#8217;da kimlik do\u011frulamas\u0131 gerektirmeyen iki uzaktan kod \u00e7al\u0131\u015ft\u0131rma a\u00e7\u0131\u011f\u0131 olan PHP2Shell i\u00e7in acil d\u00fczeltmeler yay\u0131mlad\u0131; ayn\u0131 g\u00fcn Node.js de g\u00fcvenlik s\u00fcr\u00fcm\u00fc \u00e7\u0131kard\u0131. Nelerin yamaland\u0131\u011f\u0131, bar\u0131nd\u0131rma altyap\u0131s\u0131na nas\u0131l ula\u015ft\u0131\u011f\u0131 ve g\u00fcncellemeden \u00f6nce, s\u0131ras\u0131nda ve sonra yap\u0131lmas\u0131 gerekenler.<\/p>\n","protected":false},"author":0,"featured_media":39,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[12,6,11,13,3,2,5,10,30],"class_list":["post-14","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-cloudlinux","tag-cpanel","tag-cve-2026-109618","tag-easyapache-4","tag-node-js","tag-php","tag-php-fpm","tag-php2shell","tag-yama-yonetimi"],"_links":{"self":[{"href":"https:\/\/adnancanturk.com\/blog\/wp-json\/wp\/v2\/posts\/14","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/adnancanturk.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/adnancanturk.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/adnancanturk.com\/blog\/wp-json\/wp\/v2\/comments?post=14"}],"version-history":[{"count":2,"href":"https:\/\/adnancanturk.com\/blog\/wp-json\/wp\/v2\/posts\/14\/revisions"}],"predecessor-version":[{"id":47,"href":"https:\/\/adnancanturk.com\/blog\/wp-json\/wp\/v2\/posts\/14\/revisions\/47"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/adnancanturk.com\/blog\/wp-json\/wp\/v2\/media\/39"}],"wp:attachment":[{"href":"https:\/\/adnancanturk.com\/blog\/wp-json\/wp\/v2\/media?parent=14"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/adnancanturk.com\/blog\/wp-json\/wp\/v2\/categories?post=14"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/adnancanturk.com\/blog\/wp-json\/wp\/v2\/tags?post=14"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}