OffSec

Mentions · 7d2
Mentions · 30d2
All mentions2
First seenOct 28, 2026
Last mentioned2d ago

Timeline

2 articles · newest first

PHP2Shell flaws exploited in the wild; OffSec ships free lab

CISA listed both flaws on October 26; fixed PHP builds are 8.5.12, 8.4.27, 8.3.36 and 8.2.35.

GBHackersupdated 15:43 UTC · 7h agofirst Oct 28, 17:56 UTC · 2d agoExploit / PoCExploited26 sourcesCVE-2026-109618 CVE-2026-109619 CVE-2026-115560

PHP2Shell flaws exploited in the wild; OffSec ships free lab

CISA listed both flaws on October 26; fixed PHP builds are 8.5.12, 8.4.27, 8.3.36 and 8.2.35.

Cyber Security Newsupdated 15:43 UTC · 7h agofirst Oct 28, 17:54 UTC · 2d agoExploit / PoCExploited26 sourcesCVE-2026-109618 CVE-2026-109619 CVE-2026-115560

Related CVEs

by mentions

CVE-2026-109619100%9.2
Use-after-free RCE in PHP via stale request globals
published 9d agophpKEVPoC ×15
CVE-2026-109618100%9.2
OOM longjmp memory flaw enabling RCE in PHP
published 9d agophpKEVPoC ×25
CVE-2026-115560—
published —PoC ×11

Appears with

Amazonorganization · 2
CISAorganization · 2
PHPvendor · 2
Wizorganization · 2

Entities are extracted by the model from each article. First seen Oct 28, 2026, last mentioned 2d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.