PoC for critical PHP RCEs draws scans; Sophos sees no confirmed compromises
Sophos revised an earlier alert: telemetry showed scans and failed attempts, not successful compromises of CVE-2026-109618 or CVE-2026-109619.
Stories per day · 30 days
2 RSS
Relatedphp16php2shell11remote-code-execution11php-fpm8rce5use-after-free4wordpress4memory-corruption2detection1mirai1potassium1scanner1web-servers1
7 stories, newest first · one card per story
Stories tagged #mod-php
Third PHP2Shell bug waits for the regular PHP release
CVE-2026-115560 needs a rare session setup; the foundation reports no confirmed compromises of the two bugs patched Wednesday.
PHP patches two unauthenticated RCE flaws in four current branches
Maintainers say updating is the only fix, with the highest risk on Apache mod_php.
Searchlight releases php2shell-scanner for two PHP RCE bugs
The open-source scanner forces a PHP out-of-memory condition instead of trusting version banners.
3
PHP patches PHP2Shell RCE bugs as exploit attempts hit sensors
CVE-2026-109618 and CVE-2026-109619, both CVSS 9.2, are fixed in 8.5.12, 8.4.27, 8.3.36, and 8.2.35.
2
Calif Research shows pre-auth PHP2Shell RCE on default PHP
The authors say paths dating to PHP 5.4.0 yield RCE, including on WordPress, Drupal, and Joomla.
PHP patches two leaked critical core RCE flaws after early disclosure
Fixed builds are PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35; watchTowr reports no observed attacks.
3