CVE-2026-93485

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

September 22, 2026

Last Seen

October 30, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

PHP2Shell Vulnerabilities Threaten 70% of Websites with Remote Code Execution72.9

The PHP2Shell vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619, pose a critical threat to approximately 70% of websites globally, allowing unauthenticated remote code execution. Discovered by the security firm Calif using AI, these flaws were leaked before a scheduled patch on Octo...

WordPress Comment2Shell Vulnerability Allows RCE via Anonymous Comments64.5

A critical vulnerability in WordPress, tracked as CVE-2026-93485, allows unauthenticated users to execute remote code on servers through a crafted comment. This flaw, dubbed 'Comment2Shell,' enables attackers to insert malicious scripts that execute when a logged-in administrator views the comment....