PHP2Shell attack attempts began before public disclosure
AWS honeypots logged attempts four days before patches; operators are told to review logs from October 17.
Stories per day · 30 days
3 stories, newest first · one card per story
Stories tagged #pre-disclosure
PHP2Shell attacks started four days before public disclosure
Fixed builds are PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35; AWS saw broad exploitation and no full config-only workaround.
10
Leaked PHP2Shell flaws may allow unauthenticated remote code execution
CVE-2026-109618 and CVE-2026-109619 both score 9.2; WatchTowr and Huntress report no exploitation yet.
9