Rapid Response: php2shell, Leaked Critical PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619)

T1Covered by 1 source · first reported by Huntress at 21 Oct, 04:00 UTC

Two critical PHP RCEs, CVE-2026-109618 and CVE-2026-109619, leaked before the patch. Learn what's known, who's exposed, and how to prepare now.

security

Sources

• T1Rapid Response: php2shell, Leaked Critical PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619)Huntress21 Oct, 04:00

Vulnerabilities

• CVE-2026-109618
• CVE-2026-109619