~Morphisec~
Unauthenticated PHP2Shell attacks are hitting Windows IIS servers with reverse-shell payloads.
-
IOCs: CVE-2026-109618, CVE-2026-109619
-
#CVE2026109618 #PHP2Shell #ThreatIntel
Unauthenticated PHP2Shell attacks are hitting Windows IIS servers with reverse-shell payloads.
-
IOCs: CVE-2026-109618, CVE-2026-109619
-
#CVE2026109618 #PHP2Shell #ThreatIntel
PHP2Shell Targets Windows IIS
www.morphisec.com
October 28, 2026 at 12:51 PM
~Morphisec~
Unauthenticated PHP2Shell attacks are hitting Windows IIS servers with reverse-shell payloads.
-
IOCs: CVE-2026-109618, CVE-2026-109619
-
#CVE2026109618 #PHP2Shell #ThreatIntel
Unauthenticated PHP2Shell attacks are hitting Windows IIS servers with reverse-shell payloads.
-
IOCs: CVE-2026-109618, CVE-2026-109619
-
#CVE2026109618 #PHP2Shell #ThreatIntel
~Akamai~
Critical PHP flaws enable RCE; patch immediately.
-
IOCs: CVE-2026-109619, CVE-2026-109618
-
#CVE2026109618 #CVE2026109619 #PHP2Shell #ThreatIntel
Critical PHP flaws enable RCE; patch immediately.
-
IOCs: CVE-2026-109619, CVE-2026-109618
-
#CVE2026109618 #CVE2026109619 #PHP2Shell #ThreatIntel
PHP2Shell RCE
www.akamai.com
October 22, 2026 at 8:04 PM
~Akamai~
Critical PHP flaws enable RCE; patch immediately.
-
IOCs: CVE-2026-109619, CVE-2026-109618
-
#CVE2026109618 #CVE2026109619 #PHP2Shell #ThreatIntel
Critical PHP flaws enable RCE; patch immediately.
-
IOCs: CVE-2026-109619, CVE-2026-109618
-
#CVE2026109618 #CVE2026109619 #PHP2Shell #ThreatIntel
~Arcticwolf~
Unauthenticated RCE is under active exploitation; patch PHP immediately.
-
IOCs: 92[.]118[.]112[.]100, thunder[.]godofthunder[.]st, CVE-2026-109618
-
#CVE2026109618 #PHP2Shell #ThreatIntel
Unauthenticated RCE is under active exploitation; patch PHP immediately.
-
IOCs: 92[.]118[.]112[.]100, thunder[.]godofthunder[.]st, CVE-2026-109618
-
#CVE2026109618 #PHP2Shell #ThreatIntel
PHP2Shell RCE
arcticwolf.com
October 22, 2026 at 8:05 PM
~Arcticwolf~
Unauthenticated RCE is under active exploitation; patch PHP immediately.
-
IOCs: 92[.]118[.]112[.]100, thunder[.]godofthunder[.]st, CVE-2026-109618
-
#CVE2026109618 #PHP2Shell #ThreatIntel
Unauthenticated RCE is under active exploitation; patch PHP immediately.
-
IOCs: 92[.]118[.]112[.]100, thunder[.]godofthunder[.]st, CVE-2026-109618
-
#CVE2026109618 #PHP2Shell #ThreatIntel
Synology: Mitigating PHP2Shell (CVE-2026-109618 / CVE-2026-109619)
mariushosting.com/synology-mit... #Synology #NAS #selfhost #selfhosted #selfhosting #homelab #OpenSource #PHP2Shell #CVE2026109618 #CVE2026109619 #Webstation #DSM #DSM7 #DSM71 #DSM72 #DSM73 #DSM74 #mariushosting
mariushosting.com/synology-mit... #Synology #NAS #selfhost #selfhosted #selfhosting #homelab #OpenSource #PHP2Shell #CVE2026109618 #CVE2026109619 #Webstation #DSM #DSM7 #DSM71 #DSM72 #DSM73 #DSM74 #mariushosting
Synology: Mitigating PHP2Shell (CVE-2026-109618 / CVE-2026-109619)
Trustworthy expert guide to your Synology and UGREEN NAS.
mariushosting.com
October 21, 2026 at 12:14 PM
Synology: Mitigating PHP2Shell (CVE-2026-109618 / CVE-2026-109619)
mariushosting.com/synology-mit... #Synology #NAS #selfhost #selfhosted #selfhosting #homelab #OpenSource #PHP2Shell #CVE2026109618 #CVE2026109619 #Webstation #DSM #DSM7 #DSM71 #DSM72 #DSM73 #DSM74 #mariushosting
mariushosting.com/synology-mit... #Synology #NAS #selfhost #selfhosted #selfhosting #homelab #OpenSource #PHP2Shell #CVE2026109618 #CVE2026109619 #Webstation #DSM #DSM7 #DSM71 #DSM72 #DSM73 #DSM74 #mariushosting
@crowdstrike.com
No in-the-wild exploitation observed; reliable RCE requires deployment-specific tuning.
-
IOCs: CVE-2026-109618, CVE-2026-109619
-
#CVE2026109618 #PHP2Shell #ThreatIntel
No in-the-wild exploitation observed; reliable RCE requires deployment-specific tuning.
-
IOCs: CVE-2026-109618, CVE-2026-109619
-
#CVE2026109618 #PHP2Shell #ThreatIntel
PHP2Shell Exploitation Constrained
www.crowdstrike.com
October 24, 2026 at 4:07 AM
@crowdstrike.com
No in-the-wild exploitation observed; reliable RCE requires deployment-specific tuning.
-
IOCs: CVE-2026-109618, CVE-2026-109619
-
#CVE2026109618 #PHP2Shell #ThreatIntel
No in-the-wild exploitation observed; reliable RCE requires deployment-specific tuning.
-
IOCs: CVE-2026-109618, CVE-2026-109619
-
#CVE2026109618 #PHP2Shell #ThreatIntel
October 22, 2026 at 8:53 AM
New post: PHP2Shell: Why Broadcasters Need to Patch Now
Two critical PHP bugs let an unauthenticated attacker run code on any server with a default PHP setup. That…
tylerwoodward.me/posts/php2shell-broadcasters/
#PrivacySecurity #PHP2Shell #PHP #CVE2026109618 #CVE2026109619 #Telos #Cybersecurity
Two critical PHP bugs let an unauthenticated attacker run code on any server with a default PHP setup. That…
tylerwoodward.me/posts/php2shell-broadcasters/
#PrivacySecurity #PHP2Shell #PHP #CVE2026109618 #CVE2026109619 #Telos #Cybersecurity
PHP2Shell: Why Broadcasters Need to Patch Now
Two critical PHP bugs let an unauthenticated attacker run code on any server with a default PHP setup. That includes some Telos gear and probably your station’s website.
tylerwoodward.me
October 24, 2026 at 2:44 PM
New post: PHP2Shell: Why Broadcasters Need to Patch Now
Two critical PHP bugs let an unauthenticated attacker run code on any server with a default PHP setup. That…
tylerwoodward.me/posts/php2shell-broadcasters/
#PrivacySecurity #PHP2Shell #PHP #CVE2026109618 #CVE2026109619 #Telos #Cybersecurity
Two critical PHP bugs let an unauthenticated attacker run code on any server with a default PHP setup. That…
tylerwoodward.me/posts/php2shell-broadcasters/
#PrivacySecurity #PHP2Shell #PHP #CVE2026109618 #CVE2026109619 #Telos #Cybersecurity
Two critical PHP flaws can enable unauthenticated code execution, and Amazon says it detected an apparent exploit attempt four days before they were publicly disclosed.
#PHP #PHP2Shell #CVE2026109618 #CVE2026109619 #Cybersecurity #SoftwarePatching
[AI]
#PHP #PHP2Shell #CVE2026109618 #CVE2026109619 #Cybersecurity #SoftwarePatching
[AI]
Why Is PHP’s Patch Race So Urgent?
Two critical PHP flaws can enable unauthenticated code execution. Amazon detected apparent exploit attempts before public disclosure.
harava.news
October 23, 2026 at 4:08 AM
Two critical PHP flaws can enable unauthenticated code execution, and Amazon says it detected an apparent exploit attempt four days before they were publicly disclosed.
#PHP #PHP2Shell #CVE2026109618 #CVE2026109619 #Cybersecurity #SoftwarePatching
[AI]
#PHP #PHP2Shell #CVE2026109618 #CVE2026109619 #Cybersecurity #SoftwarePatching
[AI]
CISA adds PHP2Shell flaws CVE-2026-109618 and CVE-2026-109619 to the CISA KEV catalog after confirmed RCE and suspected DPRK-linked scanning.
#PHPref="/hashtag/PHP2Shell" class="hover:underline text-blue-600 dark:text-sky-400 no-card-link">#PHP2Shell #CISAKEV #PHP #CVE2026109618 #CVE2026109619 #Lazarus #ExploitedInTheWild #CyberSecurity
#PHPref="/hashtag/PHP2Shell" class="hover:underline text-blue-600 dark:text-sky-400 no-card-link">#PHP2Shell #CISAKEV #PHP #CVE2026109618 #CVE2026109619 #Lazarus #ExploitedInTheWild #CyberSecurity
CISA Adds PHP2Shell to KEV as Confirmed RCE Attacks and Suspected DPRK Scanning Surface
TL;DR On October 26, 2026, CISA added the PHP2Shell flaws, CVE-2026-109618 and CVE-2026-109619, to its Known Exploited Vulnerabilities (CISA KEV) catalog. Federal agencies must patch by October 29. Meanwhile, a researcher confirmed full remote code execution in the wild, and CYFIRMA tied low-volume scanning to a suspected North Korea-linked operator. Why It Matters PHP runs a large share of the web.
securityonline.info
October 27, 2026 at 3:18 AM
CISA adds PHP2Shell flaws CVE-2026-109618 and CVE-2026-109619 to the CISA KEV catalog after confirmed RCE and suspected DPRK-linked scanning.
#PHPref="/hashtag/PHP2Shell" class="hover:underline text-blue-600 dark:text-sky-400 no-card-link">#PHP2Shell #CISAKEV #PHP #CVE2026109618 #CVE2026109619 #Lazarus #ExploitedInTheWild #CyberSecurity
#PHPref="/hashtag/PHP2Shell" class="hover:underline text-blue-600 dark:text-sky-400 no-card-link">#PHP2Shell #CISAKEV #PHP #CVE2026109618 #CVE2026109619 #Lazarus #ExploitedInTheWild #CyberSecurity
~Symantec~
Unauthenticated RCE affects PHP web servers; patch urgently.
-
IOCs: CVE-2026-109618, CVE-2026-109619, PHP2Shell
-
#CVE2026109618 #CVE2026109619 #ThreatIntel
Unauthenticated RCE affects PHP web servers; patch urgently.
-
IOCs: CVE-2026-109618, CVE-2026-109619, PHP2Shell
-
#CVE2026109618 #CVE2026109619 #ThreatIntel
PHP2Shell: Critical PHP RCE
www.security.com
October 22, 2026 at 12:35 PM
~Symantec~
Unauthenticated RCE affects PHP web servers; patch urgently.
-
IOCs: CVE-2026-109618, CVE-2026-109619, PHP2Shell
-
#CVE2026109618 #CVE2026109619 #ThreatIntel
Unauthenticated RCE affects PHP web servers; patch urgently.
-
IOCs: CVE-2026-109618, CVE-2026-109619, PHP2Shell
-
#CVE2026109618 #CVE2026109619 #ThreatIntel
🚨 PHP2Shell (CVSS 9.2) is a set of PHP flaws that allow pre-auth RCE and memory leaks on WordPress, Drupal, and Joomla. Any affected PHP version is at risk. We confirmed working exploits, and customers have fixed hundreds of hosts flagged by the Guard.
#PHP2Shell #CVE2026109618 #CVE2026109619
#PHP2Shell #CVE2026109618 #CVE2026109619
October 23, 2026 at 2:17 PM
🚨 PHP2Shell (CVSS 9.2) is a set of PHP flaws that allow pre-auth RCE and memory leaks on WordPress, Drupal, and Joomla. Any affected PHP version is at risk. We confirmed working exploits, and customers have fixed hundreds of hosts flagged by the Guard.
#PHP2Shell #CVE2026109618 #CVE2026109619
#PHP2Shell #CVE2026109618 #CVE2026109619
PHP est-il fini après PHP2Shell CVE-2026-109618 notée 9,2/10 ? Non, patché en 48h #PHP #PHP2Shell #CVE2026109618 #Cybersecurite #Patch presse83.fr/2026/10/24/p...
PHP est -il mort après la faille PHP2Shell ? Quelle est son alternative ? - Presse83.fr
Une faille provoque une panique mondiale : PHP va-t-il mourir ? La vulnérabilité, appelée PHP2Shell ( CVE-2026-109618 et CVE-2026-109619 ), présente un
presse83.fr
October 24, 2026 at 10:02 AM
PHP est-il fini après PHP2Shell CVE-2026-109618 notée 9,2/10 ? Non, patché en 48h #PHP #PHP2Shell #CVE2026109618 #Cybersecurite #Patch presse83.fr/2026/10/24/p...
@sophossecurity.bsky.social
PoC targets critical PHP RCE flaws; patch immediately.
-
IOCs: CVE-2026-109618, CVE-2026-109619
-
#CVE2026109618 #CVE2026109619 #ThreatIntel
PoC targets critical PHP RCE flaws; patch immediately.
-
IOCs: CVE-2026-109618, CVE-2026-109619
-
#CVE2026109618 #CVE2026109619 #ThreatIntel
PHP RCE PoC Released
www.sophos.com
October 21, 2026 at 4:10 PM
@sophossecurity.bsky.social
PoC targets critical PHP RCE flaws; patch immediately.
-
IOCs: CVE-2026-109618, CVE-2026-109619
-
#CVE2026109618 #CVE2026109619 #ThreatIntel
PoC targets critical PHP RCE flaws; patch immediately.
-
IOCs: CVE-2026-109618, CVE-2026-109619
-
#CVE2026109618 #CVE2026109619 #ThreatIntel
~Cisa~
Unauthenticated PHP RCE affects web-facing installations; patch immediately.
-
IOCs: CVE-2026-109618, CVE-2026-109619
-
#CVE2026109618 #CVE2026109619 #ThreatIntel
Unauthenticated PHP RCE affects web-facing installations; patch immediately.
-
IOCs: CVE-2026-109618, CVE-2026-109619
-
#CVE2026109618 #CVE2026109619 #ThreatIntel
Critical PHP RCE Vulnerabilities
www.cisa.gov
October 21, 2026 at 4:00 PM
~Cisa~
Unauthenticated PHP RCE affects web-facing installations; patch immediately.
-
IOCs: CVE-2026-109618, CVE-2026-109619
-
#CVE2026109618 #CVE2026109619 #ThreatIntel
Unauthenticated PHP RCE affects web-facing installations; patch immediately.
-
IOCs: CVE-2026-109618, CVE-2026-109619
-
#CVE2026109618 #CVE2026109619 #ThreatIntel
~Asec~
Critical PHP flaws enable unauthenticated RCE; public PoCs spread rapidly and exploitation was observed.
-
IOCs: CVE-2026-109618, CVE-2026-109619, php[.]net
-
#CVE2026109618 #CVE2026109619 #ThreatIntel
Critical PHP flaws enable unauthenticated RCE; public PoCs spread rapidly and exploitation was observed.
-
IOCs: CVE-2026-109618, CVE-2026-109619, php[.]net
-
#CVE2026109618 #CVE2026109619 #ThreatIntel
PHP php2shell PoCs Spread
asec.ahnlab.com
October 22, 2026 at 4:01 AM
~Asec~
Critical PHP flaws enable unauthenticated RCE; public PoCs spread rapidly and exploitation was observed.
-
IOCs: CVE-2026-109618, CVE-2026-109619, php[.]net
-
#CVE2026109618 #CVE2026109619 #ThreatIntel
Critical PHP flaws enable unauthenticated RCE; public PoCs spread rapidly and exploitation was observed.
-
IOCs: CVE-2026-109618, CVE-2026-109619, php[.]net
-
#CVE2026109618 #CVE2026109619 #ThreatIntel
~Kaspersky~
Unauthenticated RCE affects PHP 5.4–8.x; patch immediately.
-
IOCs: CVE-2026-109618, CVE-2026-109619, PHP2Shell
-
#CVE2026109618 #CVE2026109619 #ThreatIntel
Unauthenticated RCE affects PHP 5.4–8.x; patch immediately.
-
IOCs: CVE-2026-109618, CVE-2026-109619, PHP2Shell
-
#CVE2026109618 #CVE2026109619 #ThreatIntel
Critical PHP2Shell RCE Flaws
securelist.com
October 21, 2026 at 4:06 PM
~Kaspersky~
Unauthenticated RCE affects PHP 5.4–8.x; patch immediately.
-
IOCs: CVE-2026-109618, CVE-2026-109619, PHP2Shell
-
#CVE2026109618 #CVE2026109619 #ThreatIntel
Unauthenticated RCE affects PHP 5.4–8.x; patch immediately.
-
IOCs: CVE-2026-109618, CVE-2026-109619, PHP2Shell
-
#CVE2026109618 #CVE2026109619 #ThreatIntel
Alerte mondiale PHP2Shell : 2 failles critiques notées 9,2/10 menacent WordPress, Drupal, Joomla #PHP2Shell #CVE2026109618 #Cybersecurite #Patch #WordPress presse83.fr/2026/10/23/v...
Veille Tech - PHP2Shell, NVIDIA, Orange, Meta, IA : l'actu du 22 octobre - Presse83.fr
Une faille PHP déclenche une alerte mondiale. NVIDIA accélère dans la robotique. Orange subit une panne majeure. Meta expose des conversations IA. L'IA
presse83.fr
October 23, 2026 at 10:23 AM
Alerte mondiale PHP2Shell : 2 failles critiques notées 9,2/10 menacent WordPress, Drupal, Joomla #PHP2Shell #CVE2026109618 #Cybersecurite #Patch #WordPress presse83.fr/2026/10/23/v...
PHP:ssä on kaksi kriittistä haavoittuvuutta, joiden avulla voidaan suorittaa koodia ilman tunnistautumista, ja Amazon kertoo havainneensa ilmeisen hyväksikäyttöyrityksen neljä päivää ennen haavoittuvuuksien julkistamista.
#PHP #PHP2Shell #CVE2026109618 #CVE2026109619 #Kyberturvallisuus
[AI]
#PHP #PHP2Shell #CVE2026109618 #CVE2026109619 #Kyberturvallisuus
[AI]
Miksi PHP:n korjauspäivityksillä on niin kiire?
Kahden kriittisen PHP-haavoittuvuuden avulla hyökkääjä voi suorittaa koodia ilman tunnistautumista. Amazon havaitsi ilmeisen hyväksikäyttöyrityksen jo neljä päivää ennen haavoittuvuuksien julkistamista.
harava.news
October 23, 2026 at 4:09 AM
PHP:ssä on kaksi kriittistä haavoittuvuutta, joiden avulla voidaan suorittaa koodia ilman tunnistautumista, ja Amazon kertoo havainneensa ilmeisen hyväksikäyttöyrityksen neljä päivää ennen haavoittuvuuksien julkistamista.
#PHP #PHP2Shell #CVE2026109618 #CVE2026109619 #Kyberturvallisuus
[AI]
#PHP #PHP2Shell #CVE2026109618 #CVE2026109619 #Kyberturvallisuus
[AI]
~Certeu~
Two critical PHP flaws may enable unauthenticated RCE; patch immediately or isolate exposed apps.
-
IOCs: CVE-2026-109618, CVE-2026-109619
-
#CVE2026109618 #PHP #ThreatIntel
Two critical PHP flaws may enable unauthenticated RCE; patch immediately or isolate exposed apps.
-
IOCs: CVE-2026-109618, CVE-2026-109619
-
#CVE2026109618 #PHP #ThreatIntel
Critical PHP Vulnerabilities
cert.europa.eu
October 21, 2026 at 4:01 AM
~Certeu~
Two critical PHP flaws may enable unauthenticated RCE; patch immediately or isolate exposed apps.
-
IOCs: CVE-2026-109618, CVE-2026-109619
-
#CVE2026109618 #PHP #ThreatIntel
Two critical PHP flaws may enable unauthenticated RCE; patch immediately or isolate exposed apps.
-
IOCs: CVE-2026-109618, CVE-2026-109619
-
#CVE2026109618 #PHP #ThreatIntel
Två kritiska sårbarheter i PHP kan möjliggöra kodkörning utan autentisering, och Amazon säger att företaget upptäckte ett misstänkt exploitförsök fyra dagar innan sårbarheterna offentliggjordes.
#PHP #PHP2Shell #CVE2026109618 #CVE2026109619 #Cybersäkerhet #Programvaruuppdateringar
[AI]
#PHP #PHP2Shell #CVE2026109618 #CVE2026109619 #Cybersäkerhet #Programvaruuppdateringar
[AI]
Varför är kapplöpningen om PHP-uppdateringen så brådskande?
Två kritiska sårbarheter i PHP kan möjliggöra kodkörning utan autentisering. Amazon upptäckte vad som verkar ha varit ett exploitförsök innan sårbarheterna offentliggjordes.
harava.news
October 23, 2026 at 4:09 AM
Två kritiska sårbarheter i PHP kan möjliggöra kodkörning utan autentisering, och Amazon säger att företaget upptäckte ett misstänkt exploitförsök fyra dagar innan sårbarheterna offentliggjordes.
#PHP #PHP2Shell #CVE2026109618 #CVE2026109619 #Cybersäkerhet #Programvaruuppdateringar
[AI]
#PHP #PHP2Shell #CVE2026109618 #CVE2026109619 #Cybersäkerhet #Programvaruuppdateringar
[AI]
PHP2Shell affected products list: vendor patch status for CVE-2026-109618 and CVE-2026-109619 across PAN-OS, QNAP, Cisco, Citrix, F5 and more.
#PHPref="/hashtag/PHP2Shell" class="hover:underline text-blue-600 dark:text-sky-400 no-card-link">#PHP2Shell #PHP #CVE2026109618 #CVE2026109619 #PatchNow #QNAP #PaloAltoNetworks #CyberSecurity
#PHPref="/hashtag/PHP2Shell" class="hover:underline text-blue-600 dark:text-sky-400 no-card-link">#PHP2Shell #PHP #CVE2026109618 #CVE2026109619 #PatchNow #QNAP #PaloAltoNetworks #CyberSecurity
PHP2Shell: List of Affected Products
TL;DR PHP2Shell, tracked as CVE-2026-109618 and CVE-2026-109619, lets unauthenticated attackers run code on servers that use PHP. PHP fixed both flaws on October 21, 2026, but PHP also ships inside firewalls, NAS devices, hosting panels and cloud platforms. This page lists the PHP2Shell affected products confirmed so far, along with each vendor's patch status. Why It Matters Attackers moved fast. Amazon Threat Intelligence says "PHP2Shell is now being broadly exploited in the wild," with the first attempt seen on October 17.
securityonline.info
October 26, 2026 at 12:32 AM
PHP2Shell affected products list: vendor patch status for CVE-2026-109618 and CVE-2026-109619 across PAN-OS, QNAP, Cisco, Citrix, F5 and more.
#PHPref="/hashtag/PHP2Shell" class="hover:underline text-blue-600 dark:text-sky-400 no-card-link">#PHP2Shell #PHP #CVE2026109618 #CVE2026109619 #PatchNow #QNAP #PaloAltoNetworks #CyberSecurity
#PHPref="/hashtag/PHP2Shell" class="hover:underline text-blue-600 dark:text-sky-400 no-card-link">#PHP2Shell #PHP #CVE2026109618 #CVE2026109619 #PatchNow #QNAP #PaloAltoNetworks #CyberSecurity
Palo Alto confirms PAN-OS PHP2Shell flaws CVE-2026-109618 and CVE-2026-109619 affect the firewall management interface. Restrict access and patch.
#PaloAltoNetworks #PANOS #PHP2Shell #CVE2026109618 #CVE2026109619 #Firewall #Panorama #CyberSecurity
#PaloAltoNetworks #PANOS #PHP2Shell #CVE2026109618 #CVE2026109619 #Firewall #Panorama #CyberSecurity
Palo Alto Networks Confirms PHP2Shell Flaws Affect PAN-OS and Panorama
TL;DR Palo Alto Networks confirmed that the PHP2Shell flaws, CVE-2026-109618 and CVE-2026-109619, affect PAN-OS, Panorama and WildFire WF-500 appliances. The PAN-OS PHP2Shell risk sits in the management web interface. Hotfixes are rolling out, and Threat Prevention signatures are available now. Why It Matters Attackers are already exploiting PHP2Shell broadly, according to Amazon Threat Intelligence. PAN-OS management interfaces have also drawn attacks before.
securityonline.info
October 23, 2026 at 2:53 PM
Palo Alto confirms PAN-OS PHP2Shell flaws CVE-2026-109618 and CVE-2026-109619 affect the firewall management interface. Restrict access and patch.
#PaloAltoNetworks #PANOS #PHP2Shell #CVE2026109618 #CVE2026109619 #Firewall #Panorama #CyberSecurity
#PaloAltoNetworks #PANOS #PHP2Shell #CVE2026109618 #CVE2026109619 #Firewall #Panorama #CyberSecurity
🚨 PHP2Shell affects multiple vulnerabilities (CVE-2026-109618, CVE-2026-109619).
secdb.nttzen.cloud/updates/54fd...
- CVE-2026-109618 - RCE via OOM corruption
- CVE-2026-109619 - RCE via stale global state
#InfoSec #PHP2Shell #RCE #CVE2026109618 #CVE2026109619
#NTTDATA #ZENSecDB
secdb.nttzen.cloud/updates/54fd...
- CVE-2026-109618 - RCE via OOM corruption
- CVE-2026-109619 - RCE via stale global state
#InfoSec #PHP2Shell #RCE #CVE2026109618 #CVE2026109619
#NTTDATA #ZENSecDB
Making sure you're not a bot!
secdb.nttzen.cloud
October 21, 2026 at 8:05 PM
🚨 PHP2Shell affects multiple vulnerabilities (CVE-2026-109618, CVE-2026-109619).
secdb.nttzen.cloud/updates/54fd...
- CVE-2026-109618 - RCE via OOM corruption
- CVE-2026-109619 - RCE via stale global state
#InfoSec #PHP2Shell #RCE #CVE2026109618 #CVE2026109619
#NTTDATA #ZENSecDB
secdb.nttzen.cloud/updates/54fd...
- CVE-2026-109618 - RCE via OOM corruption
- CVE-2026-109619 - RCE via stale global state
#InfoSec #PHP2Shell #RCE #CVE2026109618 #CVE2026109619
#NTTDATA #ZENSecDB
Dos vulnerabilidades críticas de PHP pueden permitir la ejecución de código sin autenticación, y Amazon afirma que detectó un aparente intento de explotación cuatro días antes de que se hicieran públicas.
#PHP #PHP2Shell #CVE2026109618 #CVE2026109619 #Ciberseguridad
[AI]
#PHP #PHP2Shell #CVE2026109618 #CVE2026109619 #Ciberseguridad
[AI]
¿Por qué es tan urgente la carrera de PHP por publicar parches?
Dos vulnerabilidades críticas de PHP pueden permitir la ejecución de código sin autenticación. Amazon detectó aparentes intentos de explotación antes de que se hicieran públicas.
harava.news
October 23, 2026 at 4:09 AM
Dos vulnerabilidades críticas de PHP pueden permitir la ejecución de código sin autenticación, y Amazon afirma que detectó un aparente intento de explotación cuatro días antes de que se hicieran públicas.
#PHP #PHP2Shell #CVE2026109618 #CVE2026109619 #Ciberseguridad
[AI]
#PHP #PHP2Shell #CVE2026109618 #CVE2026109619 #Ciberseguridad
[AI]
"Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed" 🤔 🕵️
thehackernews.com/2026/10/some...
#CVE2026109618 #CVE2026109619 #php #php2shell #exploit #cybersec #infosec
thehackernews.com/2026/10/some...
#CVE2026109618 #CVE2026109619 #php #php2shell #exploit #cybersec #infosec
Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed
Amazon detected a PHP2Shell exploit attempt on October 17, before disclosure, followed by further attempts after patches were released.
thehackernews.com
October 22, 2026 at 7:56 AM
"Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed" 🤔 🕵️
thehackernews.com/2026/10/some...
#CVE2026109618 #CVE2026109619 #php #php2shell #exploit #cybersec #infosec
thehackernews.com/2026/10/some...
#CVE2026109618 #CVE2026109619 #php #php2shell #exploit #cybersec #infosec