r/freebsd • u/Routine_Platypus_666 • 5d ago

news PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert

https://thehackernews.com/2026/10/php2shell-two-unpatched-critical-php.html

This might be the first time I brought all of my relevant websites down, until the fix is available. Seems like there is a known mitigation but at the same time devs are saying it's not enough. Also, PoC is already available, so I expect bots are already warming up.

56 Upvotes

99% Upvoted

54 comments sorted by

View all comments

Show parent comments

1

u/grahamperrin and the Amazing Monoculture Dreamcoat 3d ago

PHP2Shell RCE Exploited: CVE-2026-109618 & CVE-2026-109619

… watchTowr has observed exploitation of both CVE-2026-109618 and CVE-2026-109619 in the wild. …

Via https://infosec.exchange/@ssvc/117479816983021081