ChordNews
← All news

PHP2Shell remote code execution flaws exploited in the wild, CISA confirms

By ChordNews · First written (new coverage )

CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution
Image: thehackernews.com
Comments 0

Summary

Two critical remote code execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619, collectively tracked as PHP2Shell, have been successfully exploited in the wild, according to BleepingComputer. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) confirmed active exploitation on Monday by adding both flaws to its Known Exploited Vulnerabilities (KEV) catalog, according to The Hacker News, which reports that both are rated 9.2 on the CVSS scoring system and facilitate unauthenticated remote code execution on affected deployments. The available summaries do not describe the attacks in detail.

This continues an earlier story: PHP ships emergency patches for two critical PHP2Shell remote code execution flaws

Later: Adobe Patches Eight Critical Flaws in Campaign Classic

Timeline

  1. BleepingComputer

    Source ↗

    Reports that two critical remote code execution flaws, CVE-2026-109618 and CVE-2026-109619, collectively tracked as PHP2Shell, have been successfully exploited in the wild.

  2. The Hacker News

    Source ↗

    Reports that CISA confirmed active exploitation of the recently patched PHP2Shell flaws on Monday by adding them to its KEV catalog, and that both flaws are rated 9.2 on CVSS and enable unauthenticated remote code execution.

Comments

No comments yet.

    to like and comment.

    © 2026 ChordNews