CISA Confirms PHP2Shell Vulnerabilities Now Exploited in Attacks
10 Articles
10 Articles
CISA confirms PHP2Shell vulnerabilities now exploited in attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday. [...]
CISA Flags Two Actively Exploited PHP2Shell RCE Flaws
CISA has confirmed active exploitation of two PHP2Shell vulnerabilities that allow remote code execution on exposed PHP deployments. The agency has added the flaws to its Known Exploited Vulnerabilities catalog, elevating them from theoretical web...
On 26 October 2026, the United States Agency for Cybersecurity and Infrastructure Security included two serious gaps in the PHP programming language in its list of effectively identified gaps, inviting institutions and site officials to deal with them as a matter of urgency. The gaps carry the symbols CVE-2026-109618 and CVE-2026-109619 and are known as PHP2Shell.
Attacks have been on it since the php2shell weak spot became known. At the weekend, successful attacks were confirmed.
CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution
Ravie LakshmananOct 27, 2026Vulnerability / Web Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding them to its Known Exploited Vulnerabilities (KEV) catalog. The PHP vulnerabilities, both rated 9.2 on the CVSS scoring system, facilitate unauthenticated remote code execution on affected deployments
Coverage Details
Bias Distribution
- 50% of the sources are Center, 50% of the sources lean Right
Factuality
To view factuality data please Upgrade to Premium
