PHP2Shell security flaws now sucessfully exploited in the wild

T1High 40Covered by 1 source · first reported by BleepingComputer at 26 Oct, 09:19 UTC

Two critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as PHP2Shell, have been successfully exploited in the wild. [...]

security

Sources

• T1PHP2Shell security flaws now sucessfully exploited in the wildBleepingComputer26 Oct, 09:19

Vulnerabilities

• CVE-2026-109618
• CVE-2026-109619