PHP2Shell flaws drew millions of exploit attempts, some before disclosure
Amazon saw a honeypot hit on October 17, four days before patches, and Cloudflare has since logged millions of attempts.
86
- Mentions · 7d0
- Mentions · 30d5
- All mentions8
- First seenSep 9, 2026
- Last mentioned10d ago
Timeline
8 articles · newest firstPHP RCE flaws CVE-2026-109618 and CVE-2026-109619 exploited in the wild
Fixed builds are 8.5.12, 8.4.27, 8.3.36 and 8.2.35; PHP 7.4, 8.0 and 8.1 get emergency source backports only.
90
PHP patches PHP2Shell RCE bugs as exploit attempts hit sensors
CVE-2026-109618 and CVE-2026-109619, both CVSS 9.2, are fixed in 8.5.12, 8.4.27, 8.3.36, and 8.2.35.
92
Hadrian Raises $40 Million to Expand Autonomous Offensive Security Platform
Hadrian raised $40 million in Series B funding to expand its autonomous AI offensive security platform.
36
FBI confirms 'multiple' arrests related to ShinyHunters hack
FBI says multiple suspects were arrested in the ShinyHunters investigation, with reported detentions in Jordan and the Netherlands.
66
Dutch Police Arrest Convicted Hacker in ShinyHunters Investigation
Dutch police arrested a 24-year-old Amsterdam suspect, identified as Pepijn van der Stap, in the ShinyHunters investigation.
66
Dutch Police Arrest 24-Year-Old Amsterdam Man in ShinyHunters Investigation
Dutch police arrested a 24-year-old Amsterdam man identified as Pepijn van der Stap in the ShinyHunters case.
66
New cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as Root
cPanel patched CVE-2026-67401, an SQL injection in EmailTrack letting an account with mail privileges run code as root on the server.
56
Related CVEs
by mentions- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-109618100%9.2OOM longjmp memory flaw enabling RCE in PHP
- CVE-2026-3527397%9.8Unauthenticated Takeover Flaw in Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-67401<1%9.9Authenticated SQL Injection in cPanel EmailTrack Leads to Root RCE
Appears with
- FBIvictim · 3
- Cloudflareorganization · 3
- ShinyHuntersthreat actor · 3
- WatchTowrorganization · 2
- PHP Foundationvendor · 2
- PHPproduct · 2
- Oraclevendor · 2
- FBIorganization · 2
- Scattered Lapsus$ Huntersthreat actor · 2
- Dutch Policeorganization · 2
- Neo Securityorganization · 2
- Jaguar Land Rovervictim · 1
- PHPvendor · 1
- DIVDorganization · 1
- Dutch Institute for Vulnerability Disclosureorganization · 1
- PeopleSoftproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.