Cybersecurity4 min reading time
CISA confirms attackers are exploiting both PHP2Shell flaws
The Next Web
Read the full article
The US Cybersecurity and Infrastructure Security Agency (CISA) has officially listed both PHP2Shell vulnerabilities as actively exploited, requiring federal agencies to patch them by October 29, 2026. Independent researchers confirmed remote code execution attacks exploiting CVE-2026-109618, with evidence of a campaign compromising 25 servers, including US government-affiliated systems.
- Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces· The Hacker News
- Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges· The Hacker News
- “The panic hasn’t turned into patching”: What security researchers really think about the PHP2Shell response· The New Stack (AI)
- PHP2Shell Exploitation Attempts Continue Amid Suspected N. Korea Global Scanning Activity· The Hacker News
- Will AI expose the rickety infrastructure of the internet?· TechCrunch
- AI is finding software flaws faster, and so are hackers: Inside the PHP scramble· 2 sources