{"id":3017,"date":"2026-10-23T00:55:12","date_gmt":"2026-10-22T15:55:12","guid":{"rendered":"https:\/\/onepress.co.kr\/?post_type=briefing&p=3017"},"modified":"2026-10-23T00:57:01","modified_gmt":"2026-10-22T15:57:01","slug":"2026-10-23-php2shell-ko","status":"publish","type":"briefing","link":"https:\/\/onepress.co.kr\/index.php\/briefing\/2026-10-23-php2shell-ko\/","title":{"rendered":"PHP \uae34\uae09 \ubcf4\uc548 \uc218\uc815, \uc6cc\ub4dc\ud504\ub808\uc2a4 \uc5c5\ub370\uc774\ud2b8\ub9cc\uc73c\ub85c\ub294 \ucda9\ubd84\ud558\uc9c0 \uc54a\ub2e4"},"content":{"rendered":"

2026-10-23 00:55:12 KST<\/strong><\/p>\n

PHP \ud504\ub85c\uc81d\ud2b8\uac00 10\uc6d4 21\uc77c \uc11c\ubc84\uc5d0\uc11c \ub85c\uadf8\uc778 \uc5c6\uc774 \ucf54\ub4dc \uc2e4\ud589\uc744 \ud5c8\uc6a9\ud560 \uc218 \uc788\ub294 \ub450 \ucde8\uc57d\uc810\uc744 \uae34\uae09 \uc218\uc815\ud588\ub2e4.<\/p>\n

\uc601\ud5a5\uc740 \uc11c\ubc84 \uc124\uc815\uacfc \uc2e4\ud589 \uacbd\ub85c\uc5d0 \ub530\ub77c \ub2ec\ub77c\uc9c0\uba70, PHP\ub97c \uc4f0\ub294 \ubaa8\ub4e0 \uc0ac\uc774\ud2b8\uac00 \uce68\ud574\ub410\ub2e4\ub294 \ub73b\uc740 \uc544\ub2c8\ub2e4.<\/p>\n

\uc6f9\uc0ac\uc774\ud2b8 \ubc11\uc5d0\uc11c \ub3cc\uc544\uac00\ub294 \ud504\ub85c\uadf8\ub7a8\uc758 \ubb38\uc81c\ub2e4<\/h2>\n

\uc6cc\ub4dc\ud504\ub808\uc2a4 \uac19\uc740 \uc11c\ube44\uc2a4\ub294 PHP\ub77c\ub294 \uc2e4\ud589\ud658\uacbd \uc704\uc5d0\uc11c \ub3d9\uc791\ud55c\ub2e4. \uc774\ubc88 PHP2Shell\uc740 PHP\uac00 \uba54\ubaa8\ub9ac\ub97c \uc4f0\uace0 \uc624\ub958\ub97c \ucc98\ub9ac\ud558\ub294 \ubc29\uc2dd\uc758 \ubb38\uc81c\ub2e4. \uc694\uccad \ucc98\ub9ac \uc911 \uc624\ub958\uac00 \ub098\uba74 \uc900\ube44\uac00 \ub35c \ub410\uac70\ub098 \uc774\ubbf8 \ud574\uc81c\ub41c \uba54\ubaa8\ub9ac\ub97c \uc798\ubabb \uc0ac\uc6a9\ud560 \uc218 \uc788\ub2e4. \ub530\ub77c\uc11c \ud14c\ub9c8\u00b7\ud50c\ub7ec\uadf8\uc778\u00b7\uc6cc\ub4dc\ud504\ub808\uc2a4\ub9cc \uac31\uc2e0\ud574\ub3c4 PHP \uc790\uccb4\uac00 \ud568\uaed8 \uace0\uccd0\uc9c0\ub294 \uac83\uc740 \uc544\ub2c8\ub2e4.<\/p>\n

\uc5b4\ub290 \ubc84\uc804\ubd80\ud130 \uace0\uccd0\uc84c\ub098<\/h2>\n

\uac01 \uc9c0\uc6d0 \uacc4\uc5f4\uc758 \uccab \uc218\uc815 \ubc84\uc804\uc740 8.2.35, 8.3.36, 8.4.27, 8.5.12\ub2e4. \ub450 \uc2dd\ubcc4\ubc88\ud638\ub294 CVE-2026-109618\uacfc CVE-2026-109619\ub2e4. \ubc30\ud3ec\ud310\uc774 \uc774\uc804 \ubc84\uc804 \ubc88\ud638\ub97c \uc720\uc9c0\ud558\uba74\uc11c \ubcf4\uc548 \uc218\uc815\ub9cc \ubc18\uc601\ud560 \uc218\ub3c4 \uc788\uc73c\ubbc0\ub85c \uc22b\uc790\ub9cc \ubcf4\uace0 \uacb0\ub860\uc744 \ub0b4\ub9ac\uba74 \uc548 \ub41c\ub2e4. \ud638\uc2a4\ud305 \uc5c5\uccb4\uc5d0 \uc2e4\uc81c \uc6f9 \uc694\uccad\uc744 \ucc98\ub9ac\ud558\ub294 PHP\uc758 \ubcf4\uc548 \uacf5\uc9c0\uc640 \ub450 CVE \uc218\uc815 \uc5ec\ubd80\ub97c \ud655\uc778\ud558\ub294 \uac83\uc774 \ud575\uc2ec\uc774\ub2e4.<\/p>\n

\"PHP
\uc8fc\uc81c \uc124\uba85\uc6a9 AI \uc0dd\uc131 \uc774\ubbf8\uc9c0\uc785\ub2c8\ub2e4. \uc2e4\uc81c \ud604\uc7a5\u00b7\ucc3d\uace0\u00b7\uc804\uc2dc \uc791\ud488\u00b7\uad00\uce21 \uc0ac\uc9c4\uc774 \uc544\ub2c8\uba70 \uac74\ucd95\u00b7\uc218\uc704\u00b7\uada4\ub3c4\ub97c \uc815\ud655\ud55c \ucd95\ucc99\uc73c\ub85c \uc7ac\ud604\ud558\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4.<\/figcaption><\/figure>\n

\ubc29\ud654\ubcbd\uc774 \uc788\uc5b4\ub3c4 \ud328\uce58\ub294 \ud544\uc694\ud558\ub2e4<\/h2>\n

Cloudflare\ub294 \uc790\uccb4 \uace0\uac1d \ud2b8\ub798\ud53d\uc5d0\uc11c \uacf5\uaca9 \uc2dc\ub3c4\ub97c \uad00\uce21\ud588\uace0 \uc644\ud654 \uaddc\uce59\uc744 \ubc30\ud3ec\ud588\ub2e4\uace0 \ubc1d\ud614\ub2e4. \ub2e4\ub9cc \uacf5\uaca9 \ud2b8\ub798\ud53d \uad00\uce21\uc740 \ubaa8\ub4e0 \uc2dc\ub3c4\uac00 \uc131\uacf5\ud588\ub2e4\ub294 \uc99d\uac70\uac00 \uc544\ub2c8\ub2e4. \uc774 \ud68c\uc0ac\ub294 \uacf5\uac1c \uc870\uc815\uc5d0 \ucc38\uc5ec\ud55c \uc5c5\uccb4\uc774\ubbc0\ub85c \uc5f0\uad6c\uc640 \uc644\uc804\ud788 \ubb34\uad00\ud55c \uae30\uad00\ub3c4 \uc544\ub2c8\ub2e4. \uc790\uccb4 \uad00\uce21\uc740 \ubcc4\ub3c4 \ud655\uc778 \uadfc\uac70\ub85c \uc4f0\ub418, \ubc29\ud654\ubcbd\uc774 PHP \uc218\uc815 \uc790\uccb4\ub97c \ub300\uc2e0\ud55c\ub2e4\uace0 \ud574\uc11d\ud558\uc9c0 \uc54a\ub294\ub2e4.<\/p>\n

\uad00\ub9ac\uc790\uc5d0\uac8c \ud655\uc778\ud560 \ud56d\ubaa9\uc740 \ubb34\uc5c7\uc778\uac00<\/h2>\n

\uc9c1\uc811 \uc6b4\uc601\ud55c\ub2e4\uba74 \ud638\ud658\uc131\uc744 \ud655\uc778\ud558\uace0 \ubc31\uc5c5\ud55c \ub4a4 \uc218\uc815 \ud328\ud0a4\uc9c0\ub97c \uc801\uc6a9\ud558\uba70, \ud574\ub2f9 \uc6f9\uc11c\ubc84\u00b7PHP-FPM\u00b7\uc7a5\uae30 \uc2e4\ud589 \uc791\uc5c5\uc744 \ub2e4\uc2dc \uc2dc\uc791\ud574\uc57c \ud55c\ub2e4. \uba85\ub839\uc904 PHP\uc640 \uc6f9\uc11c\ubc84 PHP\uac00 \ub2e4\ub97c \uc218\ub3c4 \uc788\ub2e4. \uc77c\ubc18 \uc774\uc6a9\uc790\ub294 \uc0ac\uc774\ud2b8 \uc811\uc18d\ub9cc\uc73c\ub85c \uc11c\ubc84\uc758 \uc218\uc815 \uc5ec\ubd80\ub97c \ud310\ub2e8\ud560 \uc218 \uc5c6\ub2e4. \uc774\ud6c4 \ud655\uc778\ud560 \uc790\ub8cc\ub294 PHP \uacf5\uc2dd \ubcf4\uc548 \uacf5\uc9c0\uc640 \ud638\uc2a4\ud305\uc758 \ud328\ud0a4\uc9c0 \ubcc0\uacbd \uae30\ub85d\uc774\uba70, \uc774 \uae00\uc740 \uac1c\ubcc4 \uc0ac\uc774\ud2b8 \uce68\ud574 \uc5ec\ubd80\ub97c \uac80\uc0ac\ud55c \uacb0\uacfc\uac00 \uc544\ub2c8\ub2e4.<\/p>\n

\uc6d0\uc790\ub8cc\uc640 \ub3c5\ub9bd \ud655\uc778<\/h2>\n

\uc6d0\uc790\ub8cc: \uc218\uc815 \ubc84\uc804\u00b7\uc870\uac74\ubd80 \uc601\ud5a5\u00b7\ub450 CVE\uc640 \uacf5\uac1c \uacbd\uc704\ub97c \uc124\uba85\ud558\ub294 PHP \uc7ac\ub2e8 \ubc1c\ud45c: PHP Foundation \u00b7 2026-10-21<\/a><\/p>\n

\ubcc4\ub3c4 \ud655\uc778: \uc790\uccb4 \uace0\uac1d \ud2b8\ub798\ud53d\uc758 \uacf5\uaca9 \uad00\uce21\uacfc \uc644\ud654. \uacf5\uac1c \uc870\uc815 \ucc38\uc5ec \uc5c5\uccb4\uc774\uba70 \uc5f0\uad6c\uc640 \ubb34\uad00\ud55c \uae30\uad00\uc740 \uc544\ub2d8: Cloudflare \u00b7 2026-10-21<\/a><\/p>\n

\uc6d0\uc5f0\uad6c \uc548\ub0b4: \uacc4\uc5f4\ubcc4 \uccab \uc218\uc815\u00b7\uc2e4\uc81c \uc2e4\ud589\ud658\uacbd \uac31\uc2e0\uacfc \uc7ac\uc2dc\uc791. \uacf5\uaca9 \uc7ac\ud604 \uc808\ucc28\ub294 \ubcf8\ubb38\uc5d0 \uc2e3\uc9c0 \uc54a\uc74c: PHP2Shell \u00b7 research advisory<\/a><\/p>\n

\ub2e4\ub978 \uc5b8\uc5b4\ub85c \uc77d\uae30<\/h2>\n

\ud55c\uad6d\uc5b4<\/a> \u00b7 English<\/a> \u00b7 Espa\u00f1ol<\/a> \u00b7 \u65e5\u672c\u8a9e<\/a> \u00b7 Ti\u1ebfng Vi\u1ec7t<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

PHP2Shell \ub450 \ucde8\uc57d\uc810\uc740 PHP \uc2e4\ud589\ud658\uacbd \uc790\uccb4\uc5d0 \uc788\ub2e4. \ud638\uc2a4\ud305\uc774 \uc2e4\uc81c\ub85c \uc4f0\ub294 \ubc84\uc804\uacfc \ubc30\ud3ec\ud310 \ubcf4\uc548 \uc218\uc815\uc744 \ud655\uc778\ud574\uc57c \ud55c\ub2e4.<\/p>\n","protected":false},"featured_media":0,"template":"","meta":[],"class_list":["post-3017","briefing","type-briefing","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/onepress.co.kr\/index.php\/wp-json\/wp\/v2\/briefing\/3017","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/onepress.co.kr\/index.php\/wp-json\/wp\/v2\/briefing"}],"about":[{"href":"https:\/\/onepress.co.kr\/index.php\/wp-json\/wp\/v2\/types\/briefing"}],"wp:attachment":[{"href":"https:\/\/onepress.co.kr\/index.php\/wp-json\/wp\/v2\/media?parent=3017"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}