This story was combined with related coverage. Read the full story.
PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware
Threat actors have been observed unsuccessfully attempting to exploit the newly disclosed PHP2Shell vulnerabilities to rope infected systems into a Mirai botnet variant called Potassium, as it emerges that weaponizing the flaws may be harder than previously thought. The attacks aim to exploit CVE-2026-109618 and CVE-2026-109619 (CVSS scores: 9.2), which can result in unauthenticated remote
Covered by 3 publishers within 5 hours of the first report.
Summary from The Hacker News.
Reporting3
The Hacker News PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware · info@thehackernews.com (The Hacker News)
SecurityWeek Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge · Eduard Kovacs
Cyber Security News Critical PHP2Shell Exploit Code Goes Public as Hackers Attempt to Deploy Botnet Malware · Tushar Subhra Dutta