CISA adds two exploited PHP2Shell flaws to its KEV catalog after honeypot tests confirm remote code execution on a ...