PHP2Shell (CVSS 9.2) Was Exploited 4 Days Before Disclosure
PHP2Shell, CVE-2026-109618 and CVE-2026-109619 (CVSS 9.2), gives pre-auth RCE on PHP 7.x and 8.x. Exploit attempts began Oct 17. What to patch and hunt.
#php
1 post
1 post
PHP2Shell, CVE-2026-109618 and CVE-2026-109619 (CVSS 9.2), gives pre-auth RCE on PHP 7.x and 8.x. Exploit attempts began Oct 17. What to patch and hunt.