CERT24CISA confirms PHP2Shell vulnerabilities are now exploited in attacksLoading data…
CERT24Threat Observatory
Period

CISA confirms PHP2Shell vulnerabilities are now exploited in attacks

CISA added two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, to its catalog of actively exploited security flaws. Unprivileged attackers can use high-complexity attacks to achieve remote code execution on unpatched systems. The source confirms exploitation in the wild.

← Back to intelligence

CISA confirms PHP2Shell vulnerabilities are now exploited in attacks

CISA added two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, to its catalog of actively exploited security flaws. Unprivileged attackers can use high-complexity attacks to achieve remote code execution on unpatched systems. The source confirms exploitation in the wild.