PHP2Shell security flaws now sucessfully exploited in the wild
CVE-2026-109618 and CVE-2026-109619, collectively known as PHP2Shell, are critical RCE flaws currently being exploited by threat actors. The active exploitation indicates these are not theoretical risks but present dangers to organizations running affected software.
Key points
- Two critical RCE vulnerabilities actively exploited
- Tracked as PHP2Shell collective
- Immediate risk to affected systems
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. BleepingComputer did the reporting; read the original for the full story.
Read the full story at BleepingComputer
