php2shell

Reported Context (4)

dependencies could create widespread exposure that organizations struggled to identify. We believe PHP2Shell could mark a similar turning point for the AI era, illustrating how AI can change the practical Wiz Researchers Detail PHP Memory-Safety Flaws Enabling Unauthenticated RCE
demonstrated by more than one party before any official fix existed. A leaked exploit tool, known as PHP2Shell, has also been circulating, and the name is now widely used for these two vulnerabilities. PHP Emergency Update Fixes Two Critical RCE Flaws; PHP2Shell Exploit Reported
These vulnerabilities, dubbed "php2shell" by some researchers, include CVE-2026-109618 and CVE-2026-109619. CVE-2026-109618 enables remote code execution (RCE) via out-of-memory corruption, and CVE-2026-109619 enables Critical PHP Flaws Enable Unauthenticated Remote Code Execution; Exploitation Attempts Reported
PHP RCEs headed for disclosure. The leaks included screenshots and videos of an exploit tool named PHP2Shell as well as limited information about the exploitation mechanisms. The PHP security team then published PHP2Shell: Emergency PHP Fixes and Detection Guidance for Two Critical RCE Flaws

CVE (2)

People (9)

MITRE ATT&CK (3)

Vendors (11)

Products (19)

Tools (5)

Industries (2)

Countries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.