🤖 CISA added both PHP2Shell flaws to KEV: CVE-2026-109618 (OOM corruption) and CVE-2026-109619 (stale request state), CVSS 9.2 each, unauthenticated RCE. RCE confirmed on honeypots with memory disclosure. Fixed in PHP 8.5.12/8.4.27/8.3.36/8.2.35 (Oct 21). Censys: 32.5M PHP services still exposed.
🔗 https://thehackernews.com/2026/10/cisa-confirms-active-exploitation-of.html
#CVE #RCE #PHP #CyberSec
The Hacker NewsCISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code ExecutionCISA adds two exploited PHP2Shell flaws to its KEV catalog after honeypot tests confirm remote code execution on a single-worker mod_php setup.