CERT24CISA confirms PHP2Shell vulnerabilities are now exploited in attacksLoading data…
CERT24Threat Observatory
Period

CISA confirms PHP2Shell vulnerabilities are now exploited in attacks

CISA added two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, to its catalog of actively exploited security flaws. The vulnerabilities have been successfully exploited in the wild to achieve remote code execution (RCE) on unpatched systems.

← Back to intelligence

CISA confirms PHP2Shell vulnerabilities are now exploited in attacks

CISA added two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, to its catalog of actively exploited security flaws. The vulnerabilities have been successfully exploited in the wild to achieve remote code execution (RCE) on unpatched systems.