Skip to content
Off-topic for aiqbench

Off-topic for aiqbench

This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.

Hackers Weaponize Public PHP2Shell Exploit Code to Target Universities and Business Websites

Cybersecurity News5 min read

Hackers are now using public exploit code to break into websites that run PHP, and universities and business sites are among the main targets. The bugs behind this wave are two critical flaws in the PHP engine, tracked as CVE-2026-109618 and CVE-2026-109619 and nicknamed PHP2Shell. Both carry a CVSS v4.0 score of 9.2 and can […] The post Hackers Weaponize Public PHP2Shell Exploit Code to Target Universities and Business Websites appeared first on Cyber Security News.

Hackers are now using public exploit code to break into websites that run PHP, and universities and business sites are among the main targets. The bugs behind this wave are two critical flaws in the PHP engine, tracked as CVE-2026-109618 and CVE-2026-109619 and nicknamed PHP2Shell. Both carry a CVSS v4.0 score of 9.2 and can let an outside user run commands on a server without logging in. PHP released fixed versions on October 21, 2026, but many servers had not been updated when…

Excerpt shown under the publisher's RSS terms · 83 words · full text and figures are on the publisher's site

Related coverage