{"id":13095,"date":"2026-10-27T14:08:36","date_gmt":"2026-10-27T11:08:36","guid":{"rendered":"https:\/\/www.itopya.com\/blog\/?p=13095"},"modified":"2026-10-27T14:08:36","modified_gmt":"2026-10-27T11:08:36","slug":"interneti-neredeyse-felc-eden-php-krizi-milyonlarca-web-sitesi-risk-altinda-mi","status":"publish","type":"post","link":"https:\/\/www.itopya.com\/blog\/interneti-neredeyse-felc-eden-php-krizi-milyonlarca-web-sitesi-risk-altinda-mi\/","title":{"rendered":"\u0130nterneti Neredeyse Fel\u00e7 Eden PHP Krizi! Milyonlarca Web Sitesi Risk Alt\u0131nda m\u0131?"},"content":{"rendered":"

PHP2Shell G\u00fcvenlik A\u00e7\u0131\u011f\u0131 D\u00fcnya Genelinde Alarm Yaratt\u0131!<\/a><\/strong><\/h2>\n

\u0130nternet d\u00fcnyas\u0131, son y\u0131llar\u0131n en ciddi siber g\u00fcvenlik tehditlerinden biriyle kar\u015f\u0131 kar\u015f\u0131ya. Milyonlarca web sitesinin altyap\u0131s\u0131nda kullan\u0131lan PHP programlama dilinde ortaya \u00e7\u0131kan iki kritik g\u00fcvenlik a\u00e7\u0131\u011f\u0131, d\u00fcnya genelinde b\u00fcy\u00fck bir endi\u015feye neden oldu. PHP2Shell olarak adland\u0131r\u0131lan bu a\u00e7\u0131klar, sald\u0131rganlar\u0131n herhangi bir kullan\u0131c\u0131 hesab\u0131na veya \u015fifreye ihtiya\u00e7 duymadan savunmas\u0131z sunucularda zararl\u0131 kod \u00e7al\u0131\u015ft\u0131rabilmesine imk\u00e2n tan\u0131yor.<\/p>\n

21 Ekim 2026 tarihinde yay\u0131mlanan acil g\u00fcvenlik g\u00fcncellemelerinin ard\u0131ndan Avrupa Birli\u011fi siber g\u00fcvenlik kurumlar\u0131 da harekete ge\u00e7ti. Uzmanlar, \u00f6zellikle g\u00fcncellenmeyen web sunucular\u0131n\u0131n ciddi tehlike alt\u0131nda oldu\u011funu belirtiyor.<\/p>\n

PHP2Shell Nedir? \u0130nternet Siteleri Neden Tehlikede?<\/strong><\/h2>\n

PHP, internet sitelerinin arka plan\u0131nda \u00e7al\u0131\u015fan ve kullan\u0131c\u0131lar\u0131n do\u011frudan g\u00f6rmedi\u011fi i\u015flemleri ger\u00e7ekle\u015ftiren bir programlama dili. WordPress, Joomla ve Drupal gibi pop\u00fcler i\u00e7erik y\u00f6netim sistemleri de bu teknolojiden yararlan\u0131yor.<\/p>\n

Ortaya \u00e7\u0131kar\u0131lan CVE-2026-109618 ve CVE-2026-109619 kodlu g\u00fcvenlik a\u00e7\u0131klar\u0131, PHP’nin bellek y\u00f6netimindeki hatalardan kaynaklan\u0131yor. Her iki a\u00e7\u0131k da 10 \u00fczerinden 9,2 gibi olduk\u00e7a y\u00fcksek bir g\u00fcvenlik risk puan\u0131na sahip.<\/p>\n

Sald\u0131rganlar\u0131n bu a\u00e7\u0131klardan yararlanmas\u0131 durumunda web sitelerindeki hassas bilgilere eri\u015filmesi, sunucular\u0131n kontrol\u00fcn\u00fcn ele ge\u00e7irilmesi veya \u00e7evrim i\u00e7i hizmetlerin kullan\u0131lamaz h\u00e2le gelmesi m\u00fcmk\u00fcn. \u00dcstelik baz\u0131 sald\u0131r\u0131 senaryolar\u0131nda i\u015flemler, web sitesinin kendi g\u00fcvenlik kontrolleri devreye girmeden ger\u00e7ekle\u015febiliyor.<\/p>\n

\u0130nternetin Y\u00fczde 70’ini \u0130lgilendiren G\u00fcvenlik Sorunu<\/strong><\/h2>\n

Ya\u015fanan olay\u0131n bu kadar b\u00fcy\u00fck yank\u0131 uyand\u0131rmas\u0131n\u0131n en \u00f6nemli nedeni, PHP’nin d\u00fcnya genelindeki yayg\u0131nl\u0131\u011f\u0131. Cloudflare taraf\u0131ndan payla\u015f\u0131lan bilgilere g\u00f6re internet sitelerinin yakla\u015f\u0131k y\u00fczde 70’i PHP kullan\u0131yor.<\/p>\n

Bu durum, g\u00fcvenlik a\u00e7\u0131\u011f\u0131n\u0131n yaln\u0131zca k\u00fc\u00e7\u00fck internet sitelerini de\u011fil; e-ticaret platformlar\u0131n\u0131, kurumsal web sitelerini ve \u00e7e\u015fitli \u00e7evrim i\u00e7i hizmetleri de ilgilendirdi\u011fi anlam\u0131na geliyor.<\/p>\n

Ancak internette konu\u015fulan b\u00fcy\u00fck \u00e7\u00f6k\u00fc\u015f senaryolar\u0131n\u0131n aksine, d\u00fcnya genelinde internetin tamamen durdu\u011funu g\u00f6steren do\u011frulanm\u0131\u015f bir bilgi bulunmuyor. As\u0131l tehlike, \u00e7ok say\u0131da web sitesinin ayn\u0131 anda sald\u0131r\u0131lara a\u00e7\u0131k h\u00e2le gelme ihtimali.<\/p>\n

OpenAI ve Cloudflare da G\u00fcvenlik \u00c7al\u0131\u015fmalar\u0131na Kat\u0131ld\u0131<\/strong><\/h2>\n

PHP2Shell olay\u0131n\u0131n dikkat \u00e7eken taraflar\u0131ndan biri de g\u00fcvenlik a\u00e7\u0131\u011f\u0131n\u0131n ke\u015ffedilmesi ve \u00f6nlenmesi s\u00fcrecinde teknoloji \u015firketlerinin ortak hareket etmesi oldu.<\/p>\n

OpenAI, Wiz, Quarkslab ve Calif.io gibi kurulu\u015flar\u0131n yer ald\u0131\u011f\u0131 ara\u015ft\u0131rma s\u00fcrecinin ard\u0131ndan Cloudflare, sald\u0131r\u0131 giri\u015fimlerini engellemek i\u00e7in g\u00fcvenlik sistemlerini g\u00fcncelledi.<\/p>\n

Cloudflare, 21 Ekim’deki kamuya a\u00e7\u0131k duyurudan \u00f6nce koruma \u00f6nlemlerini devreye ald\u0131\u011f\u0131n\u0131 ve \u00fccretsiz plan kullan\u0131c\u0131lar\u0131 da d\u00e2hil olmak \u00fczere g\u00fcvenlik duvar\u0131 hizmetinden yararlanan m\u00fc\u015fterilerini korumaya ba\u015flad\u0131\u011f\u0131n\u0131 a\u00e7\u0131klad\u0131. \u015eirket ayr\u0131ca sald\u0131rganlar\u0131n koruma sistemlerini a\u015fmak i\u00e7in farkl\u0131 y\u00f6ntemler denedi\u011fini de bildirdi.<\/p>\n

PHP G\u00fcvenlik A\u00e7\u0131\u011f\u0131 Kapat\u0131ld\u0131 m\u0131?<\/strong><\/h2>\n

PHP geli\u015ftirici ekibi, 21 Ekim 2026 tarihinde kritik g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 gidermek amac\u0131yla yeni s\u00fcr\u00fcmler yay\u0131mlad\u0131. PHP 8.2.35, 8.3.36, 8.4.27 ve 8.5.12 s\u00fcr\u00fcmleriyle iki \u00f6nemli g\u00fcvenlik sorunu giderildi.<\/p>\n

Ancak g\u00fcncellemelerin yay\u0131mlanmas\u0131, b\u00fct\u00fcn internet sitelerinin otomatik olarak g\u00fcvende oldu\u011fu anlam\u0131na gelmiyor. Eski PHP s\u00fcr\u00fcmlerini kullanmaya devam eden sunucular sald\u0131r\u0131lara kar\u015f\u0131 savunmas\u0131z kalabiliyor.<\/p>\n

23 Ekim’de daha s\u0131n\u0131rl\u0131 ko\u015fullarda etkili olabilen \u00fc\u00e7\u00fcnc\u00fc bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131n\u0131n duyurulmas\u0131 da PHP altyap\u0131s\u0131na y\u00f6nelik incelemelerin devam etti\u011fini g\u00f6sterdi.<\/p>\n

PHP2Shell Krizi \u0130nternetin Gelece\u011fi \u0130\u00e7in Ne Anlama Geliyor?<\/strong><\/h2>\n

PHP2Shell, internetin ne kadar b\u00fcy\u00fck bir b\u00f6l\u00fcm\u00fcn\u00fcn ortak teknolojilere ba\u011fl\u0131 oldu\u011funu bir kez daha g\u00f6sterdi. Tek bir yaz\u0131l\u0131m altyap\u0131s\u0131nda ortaya \u00e7\u0131kan kritik bir hata, d\u00fcnyan\u0131n farkl\u0131 noktalar\u0131ndaki milyonlarca web sitesini ayn\u0131 anda etkileyebilecek bir g\u00fcvenlik riskine d\u00f6n\u00fc\u015febiliyor.<\/p>\n

\u015eimdilik internetin genel i\u015fleyi\u015fini durduran k\u00fcresel bir \u00e7\u00f6k\u00fc\u015f ya\u015fanm\u0131\u015f de\u011fil. Ancak siber g\u00fcvenlik uzmanlar\u0131n\u0131n uyar\u0131lar\u0131 ve teknoloji \u015firketlerinin ald\u0131\u011f\u0131 acil \u00f6nlemler, olay\u0131n ne kadar ciddi oldu\u011funu ortaya koyuyor.<\/p>\n

\u00d6n\u00fcm\u00fczdeki s\u00fcre\u00e7te \u00f6zellikle g\u00fcncellenmeyen sunucular\u0131n durumu ve olas\u0131 sald\u0131r\u0131 giri\u015fimleri yak\u0131ndan takip edilecek.<\/p>\n","protected":false},"excerpt":{"rendered":"

PHP2Shell G\u00fcvenlik A\u00e7\u0131\u011f\u0131 D\u00fcnya Genelinde Alarm Yaratt\u0131! \u0130nternet d\u00fcnyas\u0131, son y\u0131llar\u0131n en ciddi siber g\u00fcvenlik tehditlerinden biriyle kar\u015f\u0131 kar\u015f\u0131ya. Milyonlarca web sitesinin altyap\u0131s\u0131nda kullan\u0131lan PHP programlama dilinde ortaya \u00e7\u0131kan iki kritik g\u00fcvenlik a\u00e7\u0131\u011f\u0131, d\u00fcnya genelinde b\u00fcy\u00fck bir endi\u015feye neden oldu. PHP2Shell olarak adland\u0131r\u0131lan bu a\u00e7\u0131klar, sald\u0131rganlar\u0131n herhangi bir kullan\u0131c\u0131 hesab\u0131na veya \u015fifreye ihtiya\u00e7 duymadan savunmas\u0131z …<\/p>\n<\/div>","protected":false},"author":1,"featured_media":13096,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[84,83],"tags":[],"class_list":["post-13095","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-donanim","category-haberler"],"_links":{"self":[{"href":"https:\/\/www.itopya.com\/blog\/wp-json\/wp\/v2\/posts\/13095","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.itopya.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.itopya.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.itopya.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.itopya.com\/blog\/wp-json\/wp\/v2\/comments?post=13095"}],"version-history":[{"count":1,"href":"https:\/\/www.itopya.com\/blog\/wp-json\/wp\/v2\/posts\/13095\/revisions"}],"predecessor-version":[{"id":13097,"href":"https:\/\/www.itopya.com\/blog\/wp-json\/wp\/v2\/posts\/13095\/revisions\/13097"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.itopya.com\/blog\/wp-json\/wp\/v2\/media\/13096"}],"wp:attachment":[{"href":"https:\/\/www.itopya.com\/blog\/wp-json\/wp\/v2\/media?parent=13095"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.itopya.com\/blog\/wp-json\/wp\/v2\/categories?post=13095"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.itopya.com\/blog\/wp-json\/wp\/v2\/tags?post=13095"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}