CYBERSECURITYTRACKER
Permanent story citation

PHP2Shell security flaws now sucessfully exploited in the wild

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 11275

As cited

Copy frozen at (site build).

vulnerabilities

PHP2Shell security flaws now sucessfully exploited in the wild

Two critical remote code execution (RCE) vulnerabilities, CVE-2026-109618 and CVE-2026-109619, tracked as PHP2Shell, are under active exploitation in the wild. Attackers are leveraging these flaws to achieve code execution on affected systems.

Why it matters: Organizations running vulnerable PHP2Shell installations face immediate risk of compromise and should prioritize patching to block ongoing attacks.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

PHP2Shell security flaws now sucessfully exploited in the wild

Two critical remote code execution (RCE) vulnerabilities, CVE-2026-109618 and CVE-2026-109619, tracked as PHP2Shell, are under active exploitation in the wild. Attackers are leveraging these flaws to achieve code execution on affected systems.

Why it matters: Organizations running vulnerable PHP2Shell installations face immediate risk of compromise and should prioritize patching to block ongoing attacks.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

PHP2Shell security flaws now sucessfully exploited in the wild

Two critical remote code execution (RCE) vulnerabilities, CVE-2026-109618 and CVE-2026-109619, tracked as PHP2Shell, are under active exploitation in the wild. Attackers are leveraging these flaws to achieve code execution on affected systems.

Why it matters: Organizations running vulnerable PHP2Shell installations face immediate risk of compromise and should prioritize patching to block ongoing attacks.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

PHP2Shell security flaws now sucessfully exploited in the wild

Two critical remote code execution (RCE) vulnerabilities, CVE-2026-109618 and CVE-2026-109619, tracked as PHP2Shell, are under active exploitation in the wild. Attackers are leveraging these flaws to achieve code execution on affected systems.

Why it matters: Organizations running vulnerable PHP2Shell installations face immediate risk of compromise and should prioritize patching to block ongoing attacks.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

PHP2Shell security flaws now sucessfully exploited in the wild

Two critical remote code execution (RCE) vulnerabilities, CVE-2026-109618 and CVE-2026-109619, tracked as PHP2Shell, are under active exploitation in the wild. Attackers are leveraging these flaws to achieve code execution on affected systems.

Why it matters: Organizations running vulnerable PHP2Shell installations face immediate risk of compromise and should prioritize patching to block ongoing attacks.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

PHP2Shell security flaws now sucessfully exploited in the wild

Two critical remote code execution (RCE) vulnerabilities, CVE-2026-109618 and CVE-2026-109619, tracked as PHP2Shell, are under active exploitation in the wild. Attackers are leveraging these flaws to achieve code execution on affected systems.

Why it matters: Organizations running vulnerable PHP2Shell installations face immediate risk of compromise and should prioritize patching to block ongoing attacks.

VendorsLinuxMicrosoftPalo Alto NetworksWordPress
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

PHP2Shell security flaws now sucessfully exploited in the wild

Two critical remote code execution (RCE) vulnerabilities, CVE-2026-109618 and CVE-2026-109619, tracked as PHP2Shell, are under active exploitation in the wild. Attackers are leveraging these flaws to achieve code execution on affected systems.

Why it matters: Organizations running vulnerable PHP2Shell installations face immediate risk of compromise and should prioritize patching to block ongoing attacks.

VendorsGitHubLinuxMicrosoftPalo Alto NetworksWordPress
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

PHP2Shell security flaws now sucessfully exploited in the wild

Two critical remote code execution (RCE) vulnerabilities, CVE-2026-109618 and CVE-2026-109619, tracked as PHP2Shell, are under active exploitation in the wild. Attackers are leveraging these flaws to achieve code execution on affected systems.

Why it matters: Organizations running vulnerable PHP2Shell installations face immediate risk of compromise and should prioritize patching to block ongoing attacks.

VendorsAmazon Web ServicesGitHubLinuxMicrosoftOraclePalo Alto NetworksWordPress
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary