CVE-2026-111497

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 21, 2026

Last Seen

October 21, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical PHP Vulnerabilities CVE-2026-109618 and CVE-2026-109619 Require Immediate Action75.8

On October 21, 2026, PHP developers released emergency updates for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, collectively referred to as PHP2Shell. These vulnerabilities, with a CVSS score of 9.2, allow unauthenticated remote code execution (RCE) and affect multiple PHP envi...