PHP releases PHP2Shell fixes after companies detect exploit attempts
The two critical vulnerabilities are tracked as CVE-2026-109618 and CVE-2026-109619. According to Cyber Security News, they affect PHP’s session.upload_progress feature and could enable remote code execution under certain conditions. The Hacker News reports that PHP rated the flaws 9.2 out of 10 and provided no workaround of its own.
- Cyber Security News reports that public proof-of-concept tools and a testing lab are available.
- According to Fortune, OpenAI’s GPT-5.6 Sol helped identify the issue.
Covered by 20 publishers within 36 hours of the first report: 19 news reports and 1 from the company.
- Cyber Security News: Cloudflare Detects Early Exploitation Attempts Targeting Two Leaked PHP Vulnerabilities
- Latest The Verge: The disastrous PHP vulnerabilities were exploited days before the patch
Reporting19
AppleInsider New PHP vulnerability means the Internet will have a very rough couple of days · Malcolm Owen
Cyber Security News Cloudflare Detects Early Exploitation Attempts Targeting Two Leaked PHP Vulnerabilities · Guru Baran
CNET PHP Vulnerabilities Could Put Much of the Internet at Risk, Experts Warn · Katelyn Chedraoui
Search Engine Roundtable Google On Taking Sites Down When Fixing The Emergency PHP Exploit - PHP2Shell · barry@rustybrick.com (Barry Schwartz)
SecurityWeek PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors · Ionut Arghire
Dark Reading 'PHP2Shell' Bugs Signal Red Alert for Security Industry · Alexander Culafi
Engadget Government websites in the EU and Canada taken offline over PHP vulnerability · staff@engadget.com (Anna Washenko)
Semafor AI helps find vulnerability affecting up to 70% of websites · Brendan Ruberry
RuntimeWire AWS says MadPot saw PHP2Shell exploit attempt before public disclosure · Morgan Laning
Wired Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched · Lily Hay Newman
The Economic Times Cloudflare sees millions of exploit attempts after PHP disclosure
The Hacker News Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed · info@thehackernews.com (The Hacker News)
The Next Web Millions of PHP2Shell attempts so far, but officials see no break-in · Ana Maria Constantin
BleepingComputer Amazon says PHP2Shell exploitation began 4 days before patches · Sergiu Gatlan
Implicator.ai Amazon Logged a PHP2Shell Exploit Attempt Four Days Before Disclosure · Marcus Schuler
Security Affairs PHP2Shell Attacks Started Four Days Before Public Disclosure, AWS Reports · Pierluigi Paganini
The Verge The disastrous PHP vulnerabilities were exploited days before the patch · Emma Roth
SiliconANGLE PHP2Shell attacks began four days before patches, Amazon says, as attempts hit millions · Duncan Riley
From the company1
Cloudflare Cloudflare deploys protections against php2shell vulnerability · Daniele Molteni
Discussion
Hacker News 123 points, 22 comments
Related
Topics OpenAI