PHP2Shell: Real Exploitation of Two Critical PHP Vulnerabilities Confirmed — Attackers Getting Unauthorized Shell Access
Perplexity and Expel researchers have confirmed successful exploitation of PHP2Shell vulnerabilities (CVE-2026-109618/109619): attackers are gaining remote shell access without authorization. Patches were released on October 21, but attacks are already underway.
Read more →