Tag: PHP2Shell

  • PHP2Shell Exploitation Confirmed in Live Attacks

    PHP2Shell Exploitation Confirmed in Live Attacks

    Confirmed PHP2Shell exploitation has now resulted in remote code execution in the wild, according to newly published honeypot evidence. The findings mark a shift from earlier scanning and failed attempts to a successful attack. The two flaws, tracked as CVE-2026-109618 and CVE-2026-109619, received emergency patches on October 21. However, researchers have now documented a successful…

  • PHP2Shell Exploitation Attempts Began Four Days Before Patches, Amazon Says

    PHP2Shell Exploitation Attempts Began Four Days Before Patches, Amazon Says

    Amazon Threat Intelligence detected PHP2Shell exploitation attempts on October 17, four days before developers released security patches. However, researchers have not established whether those early attempts could successfully compromise real-world systems. The two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, can allow remote code execution on vulnerable PHP installations. The PHP security team released fixes on October…