AWS bulletin lists PHP runtime flaws CVE-2026-109618 and CVE-2026-109619
A WAF rule named PHP2Shell blocks POSTs that pair PHPSESSID with PHP_SESSION_UPLOAD_PROGRESS.
Stories per day · 30 days
1 stories, newest first · one card per story
1 stories, newest first · one card per story
A WAF rule named PHP2Shell blocks POSTs that pair PHPSESSID with PHP_SESSION_UPLOAD_PROGRESS.
Today 1.6K readers · 2.5K views · 778 reads · all time 189K views