CVE-2025-67779

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 29, 2026

Last Seen

October 29, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

China-Linked Hackers Exploit PHP2Shell Vulnerabilities to Breach U.S. Government Systems81.0

On October 21, 2026, the PHP development team released patches for two critical vulnerabilities in PHP, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), which allow unauthenticated remote code execution. These vulnerabilities were actively exploited by a suspected China-linked threat actor...