Active exploitation attempts have already been observed following the disclosure of the #PHP2Shell vulnerabilities.
Netcraft is supporting the NCSC response by helping notify potentially affected organizations and providing actionable guidance for remediation. https://www.netcraft.com/blog/php2shell-netcraft-supports-u.k.-response
www.netcraft.comNetcraft Supports Response to PHP2ShellNetcraft and the NCSC have issued more than 50,000 proactive notifications in response to the critical PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619), helping organizations identify affected PHP systems and take urgent remediation action.