PHP2Shell security flaws now sucessfully exploited in the wild
Summary
Two critical RCE vulnerabilities, known as PHP2Shell and tracked as CVE-2026-109618 and CVE-2026-109619, are being actively exploited in the wild. These flaws allow remote code execution and pose a significant threat.
IFF Assessment
FOE
The active exploitation of critical RCE vulnerabilities represents a direct threat to systems and data, making it bad news for defenders.
Severity
9.8
Critical
Defender Context
Defenders need to be aware of these actively exploited PHP2Shell vulnerabilities and prioritize patching or implementing mitigation strategies immediately. The successful exploitation in the wild indicates that threat actors are actively targeting systems with these flaws, necessitating prompt incident response planning.