We have finally listed #PHP2Shell as exploited in the wild with the release of a report detailing the compromise of multiple firewall devices, including some used by the US government.
https://ifin.network/t/cve-2026-109618-cve-2026-109619-remote-code-execution-in-php/914
IFINCVE-2026-109618, CVE-2026-109619: Remote Code Execution in PHPLast Updated: 2026-10-28T17:02:05Z (UTC) What’s Happening On 2026-10-21T07:00:00Z (UTC), PHP published an advisory about two critical vulnerabilities in PHP. CVSSv4: 9.2 for both. These vulnerabilities is being actively exploited in the wild. The GitHub security issue has also now been published. PHP has also published a detailed blog post detailing the timeline of these vulnerabilities’ disco