SecurityDark Readingabout 2 hours ago
PHP2Shell Leak Exposes Critical Server Bugs
4 min read
A leak of PHP2Shell tools reveals two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, allowing remote code execution on web servers. The flaws carry a CVSS v4.0 score of 9.2 and affect internet-facing servers running PHP as an Apache module. Exploitation attempts are already observed in the wild, prompting organizations to upgrade to patched versions like 8.5.12 or 8.4.27 immediately.
Level
Hype check
Tap to vote and see what everyone thinks.
