Frequency
2
occurrences
First Seen
October 21, 2026
Last Seen
October 21, 2026
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—
Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
On October 21, 2026, the PHP project released emergency patches for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, collectively known as PHP2Shell. These flaws allow unauthenticated attackers to execute arbitrary code on PHP servers, affecting versions from 5.4 to 8.5. The vulner...
Public Exploits
Checking GitHub for proof-of-concept code…