PHP2Shell: CVE-2026-109618 & CVE-2026-109619
CVE-2026-109618CVE-2026-109619SOCRadar
Vulnerabilities and CVEs
Wed 21 Oct 202620 entries
PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn't
The Hacker News
Critical PHP Vulnerabilities Leaked Ahead of Scheduled Security Patches
Infosecurity Magazine
Microsoft says October updates didn’t actually fix VPN issues
BleepingComputer
USN-8946-1: Unbound vulnerabilities
Ubuntu Security
php2shell (CVE-2026-109618, CVE-2026-109619): Frequently asked questions about critical PHP remote code execution vulnerabilities
CVE-2026-109618CVE-2026-109619Tenable
CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws
CVE-2026-96652The Hacker News
PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws
CVE-2026-109618CVE-2026-109619SecurityWeek
PHP core RCE vulnerability patches (CVE-2026-109618 and CVE-2026-109619)
CVE-2026-109618CVE-2026-109619Fortinet PSIRT
ZDI-CAN-33882: FreeBSD
Zero Day InitiativePHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert
The Hacker News
A critical PHP security release is coming today, so get ready to update!
Help Net Security
