PHP2Shell attacks began four days before patches, Amazon says, as attempts hit millions

T2Covered by 1 source · first reported by SiliconANGLE at 22 Oct, 23:27 UTC

Attackers began targeting the critical PHP2Shell vulnerabilities four days before patches were released, Amazon.com Inc. has disclosed, while exploit attempts seen by Cloudflare Inc. have since climbed into the millions. PHP’s maintainers shipped fixes for the two flaws, tracked as CVE-2026-109618…

cloudreleasessecurity

Sources

• T2PHP2Shell attacks began four days before patches, Amazon says, as attempts hit millionsSiliconANGLE22 Oct, 23:27

Vulnerabilities

• CVE-2026-109618