Off-topic for aiqbench
This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.
CISA Warns of PHP2Shell Vulnerabilities Actively Exploited in Attacks
The U.S. Cybersecurity and Infrastructure Security Agency has added two critical PHP vulnerabilities, jointly known as PHP2Shell, to its Known Exploited Vulnerabilities catalog after confirming real-world exploitation. The flaws, tracked as CVE-2026-109618 and CVE-2026-109619, can let unauthenticated attackers remotely execute code on vulnerable PHP web servers. CISA added both issues to the KEV catalog on […] The post CISA Warns of PHP2Shell Vulnerabilities Actively Exploited in Attacks appeared first on Cyber Security News.
The U.S. Cybersecurity and Infrastructure Security Agency has added two critical PHP vulnerabilities, jointly known as PHP2Shell, to its Known Exploited Vulnerabilities catalog after confirming real-world exploitation. The flaws, tracked as CVE-2026-109618 and CVE-2026-109619, can let unauthenticated attackers remotely execute code on vulnerable PHP web servers. CISA added both…
Excerpt shown under the publisher's RSS terms · 49 words · full text and figures are on the publisher's site
Related coverage
PHP2Shell: Exploitation Attempts and Remediation Trends
Wiz · Oct 27, 2026
.webp&w=320)
OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery
Cybersecurity News · Oct 28, 2026
[AINews] OpenAI’s Patch the Planet program is 1 of 2 parties to discover PHP2Shell vulnerabilities in core PHP affecting 70% of the web, using GPT-5.6 Sol; coordinated response over 2 months
Latent Space · Oct 22, 2026
PHP2Shell Vulnerability Gets a Public PoC Exploit for Security Testing
Cybersecurity News · Oct 21, 2026