NewsGreyNoise
Global Event: PHP2SHELL Live Activity Report
Teaser from the source
GreyNoise is monitoring exploitation attempts against PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619, colloquially known as 'php2shell'.
This is the RSS-feed teaser. Read the full article at the original source.
Read at GreyNoiseLinked advisories
- CVE-2026-109618Security Advisory 2026-018 — Critical Vulnerabilities in PHP
- CVE-2026-109618PHP: Mehrere Schwachstellen ermöglichen Codeausführung
- CVE-2026-109618PHP Group PHP — PHP Memory Corruption Vulnerability
- CVE-2026-109618Debian php8.4: security update
- CVE-2026-109618PHP: Use-After-Free
- CVE-2026-109618PHP vulnerabilities
- CVE-2026-109618PHP vulnerabilities
- CVE-2026-109618Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products
- CVE-2026-109618PHP2Shell core RCE vulnerability patches (CVE-2026-109618 and CVE-2026-109619)
- CVE-2026-109618Red Hat Security Advisory: php:7.4 security update
- CVE-2026-109618Red Hat Security Advisory: php:8.3 security update
- CVE-2026-109618Red Hat Security Advisory: php:8.2 security update
- CVE-2026-109618Red Hat Security Advisory: php security update
- CVE-2026-109618Red Hat Security Advisory: php:8.2 security update
- CVE-2026-109618Red Hat Security Advisory: php8.4 security update
- CVE-2026-109618Red Hat Security Advisory: php security update
- CVE-2026-109618RCE via OOM corruption
- CVE-2026-109618RCE via OOM corruption
- CVE-2026-109618RCE via OOM corruption
- CVE-2026-109618Security update for php8
- CVE-2026-109618Security update for php8
- CVE-2026-109618Security update for php7
- CVE-2026-109618Security update for php8
- CVE-2026-109618Security update for php74
- CVE-2026-109618Security update for php8
- CVE-2026-109618Siemens ProductCERT Advisory SSA-566512
- CVE-2026-109618Debian LTS php8.2: security update
- CVE-2026-109618PHP2Shell: critical unauthenticated RCE in PHP core
- CVE-2026-109618UPDATED: CVE-2026-109618 and CVE-2026-109619 affecting PHP
- CVE-2026-109618Critical vulnerabilities in PHP
- CVE-2026-109618Critical security issue affecting PHP
- CVE-2026-109618PHP Multiple Vulnerabilities
- CVE-2026-109618Critical Vulnerabilities in PHP (PHP2Shell)
- CVE-2026-109618Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.31.0 Release.
- CVE-2026-109618Siemens ProductCERT Advisory SSA-166980
- CVE-2026-109618Siemens ProductCERT Advisory SSA-566435
- CVE-2026-109618Active Exploitation of PHP2Shell Vulnerabilities Affecting Network and Security Products
- CVE-2026-109618Vulnerabilities in PHP Affecting Cisco Products: October 2026
- CVE-2026-109619PHP Group PHP — PHP Stale Internal Request-State Vulnerability
- CVE-2026-109619PHP: Use-After-Free
- CVE-2026-109619RCE via stale global state
- CVE-2026-109619RCE via stale global state
- CVE-2026-109619RCE via stale global state
- CVE-2026-109618PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for t…
- CVE-2026-109619PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated a…
- CVE-2026-109618Alert Regarding Multiple Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619)
Affected vendors and products
More on Global
Other advisories
- Not ratedCVE-2026-118181The Duplicate Post WordPress plugin before 1.5.8 does not perform a capability check when saving its global settings, relying only on its own role-access lis…
- Highosv:MAL-2026-19256Malicious code in node-global-key-listener-v9 (npm)
- Not ratedosv:CVE-2026-62973BACnet Stack: Remote Global-Buffer-Overflow Read in readpropm via Malformed ReadPropertyMultiple-ACK
- Not ratedosv:CVE-2026-58498BACnet Stack: Remote global-buffer-overflow in apps/router-ipv6/main.c routed APDU forwarding path
- HighCVE-2026-58498BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1.5.1, and 1.6.0, there is a remote global-buffe…
- Not ratedosv:CVE-2026-52787BACnet Stack: Global APDU transmit buffer out-of-bounds write in device.address-binding response encoding via address_list_encode()
- Not ratedosv:CVE-2026-128037gittuf: Policy rules bypassed in the presence of global rules
- MediumCVE-2026-128037In gittuf 0.10.0 through 0.15.0, when a minimum threshold global rule and a policy rule protect the same namespace, verification gives the global rule's chec…
Other news entries
- Microsoft Struggles to Restore Email and Other Services in a Global OutageNewsSecurityWeek
- Palo Alto Networks GlobalProtect: Schwachstelle ermöglicht PrivilegieneskalationVulnerabilityBSI CERT-Bund
- The global socket: how threat actors are weaponizing GSocket for stealthy C2NewsMicrosoft Threat Intelligence
- New malware doesn’t call home, it turns your Exchange server into its homeNewsCSO Online
- Finite State Raises $27 Million to Help Device Makers Fight ‘Vulnpocalypse’ with AI-Powered Product SecurityNewsCSO Online
- Black Hat India 2026 Makes a Landmark Debut in Bengaluru, Bringing the Global Cybersecurity Community to IndiaNewsDark Reading
- US bans MEXC crypto exchange over sanctions evasion, cybercrime linksNewsBleepingComputer
- U.S. Agencies Warn Refrigeration Controller Attacks Could Cause Fires and Inventory LossesNewsThe Hacker News
Source: https://www.greynoise.io/blog/global-event-php2shell-live-activity-report
ID