Tag
#php2shell
PHP2Shell: PHP RCE Bug Triggers Millions of Exploit Attempts (CVE-2026-109618)
CISA added both PHP2Shell flaws to its Known Exploited Vulnerabilities catalog on October 26, with a federal patch deadline of October 29: unauthenticated RCE in the PHP engine, fixed in 8.5.12, 8.4.27, 8.3.36 and 8.2.35.
Oct 25, 2026