CISA confirms PHP2Shell vulnerabilities now exploited in attacks
Teaser from the source
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on PHP2Shell
Other advisories
- CriticalCVE-2026-109618Active Exploitation of PHP2Shell Vulnerabilities Affecting Network and Security Products
- CriticalCVE-2026-109618PHP2Shell core RCE vulnerability patches (CVE-2026-109618 and CVE-2026-109619)
- CriticalCVE-2026-109618Critical Vulnerabilities in PHP (PHP2Shell)
- CriticalCVE-2026-109618PHP2Shell: critical unauthenticated RCE in PHP core
- CriticalCVE-2026-46300Linux kernel Fragnesia root exploit (CVE-2026-46300) added to CISA KEV, already used in a PHP2Shell firewall campaign
Other news entries
- (g+) Sicherheitslücke in der Firmware: PHP2Shell bleibt in Firewalls und Industriegeräten gefährlichNewsGolem.de — Security
- AI agents are a 'bane' for some website operators, says CloudflareNewsThe Register — Security
- PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPressNewsSecurityWeek
- This month in security with Tony Anscombe – October 2026 editionNewsESET WeLiveSecurity
- PHP2Shell plus Fragnesia: A dangerous new route from web server to rootNewsCSO Online
- Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 serversNewsThe Register — Security
- CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacksNewsBleepingComputer
- PHP2Shell will persist in enterprise environments for yearsNewsCSO Online
ID