#PHP2Shell
All CosmicBytez Labs articles tagged #PHP2Shell, across news, security advisories, how-to guides, and projects.
- News
PHP2Shell Exploitation Attempts Continue Amid Suspected N. Korea Global Scanning
Unit 42 retracts its PHP2Shell link to a European government breach as CYFIRMA reports suspected DPRK scanning of 216 unpatched PHP hosts.
- News
PHP2Shell Flaws Now Successfully Exploited in the Wild
Honeypot data shows working RCE exploitation of CVE-2026-109618 and CVE-2026-109619 against Apache mod_php. Patches shipped October 21; apply them now.
- News
Weekly Recap: This2Shell, That2Shell, Everything's an RCE, Rogue AI and Supply Chain Chaos
PHP2Shell, Brotli, Plex and GitLab RCE flaws, the LiteLLM PyPI compromise, an eMudhra CA breach and a Railway key-theft campaign dominate the week.
- News
PHP Warns of Another Unpatched RCE Risk (CVE-2026-115560) Two Days After Emergency PHP2Shell Patches
PHP flagged CVE-2026-115560, a code-execution risk tied to session handlers, two days after its PHP2Shell fixes. No emergency patch; disable upload progress.
- News
PHP2Shell: Emergency Patches Fix Two Critical PHP RCE Flaws
PHP shipped 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to fix CVE-2026-109618 and CVE-2026-109619, unauthenticated RCE bugs Cloudflare says are already being probed.