Detectify

Search everything

Mentions · 7d0
Mentions · 30d1
All mentions2
First seenSep 30, 2026
Last mentioned9d ago

Timeline

2 articles · newest first

Sites go offline as two critical PHP bugs draw early attacks

Fixes are out only for PHP 8.2 and newer; Cloudflare and watchTowr report emerging attacks dubbed PHP2Shell.

The RecordOct 21, 14:17 UTC · 9d agoExploit / PoCExploited2 sourcesCVE-2026-109618 CVE-2026-1096193 · 1 read

Most open critical and high flaws are over 90 days old

Detectify found 86-97% of open critical/high vulnerabilities on internet-facing systems of 1,293 customers exceed 90 days, with public sector remediating least.

Help Net SecuritySep 30, 04:00 UTC · Sep 30, 2026Research1 · 1 read

Related CVEs

by mentions

CVE-2026-109619100%9.2
Use-after-free RCE in PHP via stale request globals
published 9d agophpKEVPoC ×15
CVE-2026-109618100%9.2
OOM longjmp memory flaw enabling RCE in PHP
published 9d agophpKEVPoC ×25

Appears with

Rickard Carlssonorganization · 1
Nintendovictim · 1
PHPvendor · 1
watchTowrorganization · 1
Cloudflareorganization · 1

Entities are extracted by the model from each article. First seen Sep 30, 2026, last mentioned 9d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.