CVE-2026-28414

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 30, 2026

Last Seen

October 30, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

PHP2Shell Vulnerabilities Threaten 70% of Websites with Remote Code Execution72.9

The PHP2Shell vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619, pose a critical threat to approximately 70% of websites globally, allowing unauthenticated remote code execution. Discovered by the security firm Calif using AI, these flaws were leaked before a scheduled patch on Octo...