CVE-2026-115560

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 23, 2026

Last Seen

October 23, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical PHP Vulnerabilities Exploited Before Public Disclosure72.8

Two critical vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619, were exploited before their public disclosure on October 21, 2026. Amazon Threat Intelligence reported that attempts to exploit these vulnerabilities began on October 17, 2026, targeting its MadPot honeypot network....

New PHP Vulnerabilities Pose Critical Risk to Websites72.0

Kazakhstan's KZ-CERT has issued a warning regarding two critical vulnerabilities in PHP, known as PHP2Shell, which could allow remote code execution without authentication. The vulnerabilities, CVE-2026-109618 and CVE-2026-109619, have a severity score of 9.2 out of 10 and stem from memory-managemen...