Off-topic for aiqbench
This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.
PHP2Shell Vulnerability Gets a Public PoC Exploit for Security Testing
A public proof-of-concept repository shares verification tools and a lab setup to test two critical PHP vulnerabilities known as php2shell. The flaws, tracked by researchers as CVE-2026-109618 and CVE-2026-109619, are reported to affect PHP’s session.upload_progress feature and could lead to remote code execution under certain conditions. The release adds technical detail to a fast-moving security […] The post PHP2Shell Vulnerability Gets a Public PoC Exploit for Security Testing appeared first on Cyber Security News.
A public proof-of-concept repository shares verification tools and a lab setup to test two critical PHP vulnerabilities known as php2shell. The flaws, tracked by researchers as CVE-2026-109618 and CVE-2026-109619, are reported to affect PHP’s session.upload_progress feature and could lead to remote code execution under certain conditions. The release adds technical detail to a fast-moving security issue. PHP’s security team announced that an emergency release would address two critical vulnerabilities, each rated 9.2 under CVSS v4.0, and urged users to prepare to upgrade. Its notice scheduled the release for October 21 at 14:00 UTC. At the time of writing, that…
Excerpt shown under the publisher's RSS terms · 99 words · full text and figures are on the publisher's site
Related coverage
[AINews] OpenAI’s Patch the Planet program is 1 of 2 parties to discover PHP2Shell vulnerabilities in core PHP affecting 70% of the web, using GPT-5.6 Sol; coordinated response over 2 months
Latent Space · Oct 22, 2026
Cloudflare deploys protections against php2shell vulnerability
Cloudflare Blog · Oct 21, 2026
PHP2Shell (CVE-2026-109618 and CVE-2026-109619): Detecting unauthenticated remote code execution in PHP core
Sysdig Blog · Oct 22, 2026
Gcore Makes Enterprise Security Bundle Free for Public Agencies Until End of the Year
Cybersecurity News · Oct 22, 2026