php2shell (CVE-2026-109618, CVE-2026-109619): Frequently asked questions about critical PHP remote code execution vulnerabilities
Imported from official source
Update October 28: Clarified Amazon Threat Intelligence's wording to say php2shell is seeing broad exploitation attempts in the wild. Added Dream Research's report of a campaign that chained php2shell with the Fragnesia Linux kernel flaw (CVE-2026-46300) to gain root access on firewalls. Update October 26: CISA added CVE-2026-109618 and CVE-2026-109619 to its KEV catalog. …
This version
- Version
- 11 of 11
- Recorded
- October 28, 2026 18:01
- Change
- Imported change
- Content hash
ec7fe6dc71dde08a067b93838bdb76e1- All versions
- Revision history