NewsGolem.de — Security
PHP2Shell: Zwei PHP-Lücken, Jahre an Vorarbeit und eine hektische Offenlegung
Teaser from the source
Zwei kritische PHP-Lücken bringen Admins seit Mittwoch gehörig ins Schwitzen. Die PHP Foundation schwitzt deswegen schon seit zwei Jahren. Eine Analyse von Marc Stöckel ( Sicherheitslücke , PHP )
This is the RSS-feed teaser. Read the full article at the original source.
Read at Golem.de — SecurityMore on PHP2Shell
Other advisories
- CriticalCVE-2026-109618PHP2Shell core RCE vulnerability patches (CVE-2026-109618 and CVE-2026-109619)
- CriticalCVE-2026-109618Critical Vulnerabilities in PHP (PHP2Shell)
- CriticalCVE-2026-109618PHP2Shell: critical unauthenticated RCE in PHP core
- CriticalCVE-2026-46300Linux kernel Fragnesia root exploit (CVE-2026-46300) added to CISA KEV, already used in a PHP2Shell firewall campaign
Other news entries
- PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPressNewsSecurityWeek
- PHP2Shell plus Fragnesia: A dangerous new route from web server to rootNewsCSO Online
- Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 serversNewsThe Register — Security
- CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacksNewsBleepingComputer
- PHP2Shell will persist in enterprise environments for yearsNewsCSO Online
- Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management InterfacesNewsThe Hacker News
- PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated NetworkNewsThe Hacker News
- InfraTrust report warns of exploited flaws in critical network infrastructureNewsBleepingComputer
ID