SignalsMonitor LIVE INTELLIGENCE
SECURITYQUIET

2 hours ago

PHP2Shell security flaws now sucessfully exploited in the wild

SIGNALSMONITORSECURITY

What's happening

SignalsMonitor is following this as a security story. BleepingComputer is the outlet attached so far. The first report grouped here was at 26 Oct 2026, 09:19 UTC. The headline in use is “PHP2Shell security flaws now sucessfully exploited in the wild”. This note is SignalsMonitor's own briefing, not the publisher's article.

What we know

Two critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as PHP2Shell, have been successfully exploited in the wild. [...

BleepingComputerRead at BleepingComputer

Story timeline

Reports grouped into this story, earliest first. Exact repeats from the same outlet are collapsed.

Reported by 1 outlet

  • BleepingComputer