Critical RCE vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619)

Imported from official source

Cybersecurity Classified by Officially

We discuss the incident involving the leak of information about vulnerabilities CVE-2026-109618 and CVE-2026-109619. Kaspersky solutions detect the PHP2Shell exploit: we’ll walk you through examples using KEDR, KATA, and KES.

This is an extract. The publication continues at the source.

Read the original at the source: https://securelist.com/tr/php2shell-critical-vulnerabilities-in-php/121596/

Officially imported this from Kaspersky Securelist’s own source and shows an extract. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.

Provenance

Organization
Kaspersky Securelist — imported from official source
Official source
https://securelist.com/feed/ RSS
Imported
October 21, 2026 16:00
Versions
1 recorded
Identity
https://kasperskycontenthub.com/securelist/?post_type=threat_response&p=121596

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.