Critical RCE vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619)

Kaspersky Securelist Version 1 original current

Imported from official source

We discuss the incident involving the leak of information about vulnerabilities CVE-2026-109618 and CVE-2026-109619. Kaspersky solutions detect the PHP2Shell exploit: we’ll walk you through examples using KEDR, KATA, and KES.

This version

Version
1 of 1
Recorded
October 21, 2026 16:00
Change
Initial
Content hash
d18fdabdb0dbb206486542dba66f7b1b
All versions
Revision history

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.