CERT24Technology and Security Companies Respond to PHP2Shell VulnerabilitiesLoading data…
CERT24Threat Observatory
Period

Technology and Security Companies Respond to PHP2Shell Vulnerabilities

The two critical PHP2Shell vulnerabilities, CVE-2026-109618 and CVE-2026-109619, may allow unauthenticated attackers to execute code remotely. Attack attempts were observed before fixes were released, and mass exploitation was seen soon after the fixes were published.

← Back to intelligence

Technology and Security Companies Respond to PHP2Shell Vulnerabilities

The two critical PHP2Shell vulnerabilities, CVE-2026-109618 and CVE-2026-109619, may allow unauthenticated attackers to execute code remotely. Attack attempts were observed before fixes were released, and mass exploitation was seen soon after the fixes were published.