Curated security research, vulnerabilities, advisories and tools for practitioners.

#php2shell

Security coverage tagged php2shell.

1.

php2shell-zeros: Unpatched 0-Day RCE Flaws and Weaponized Exploit Chains in PHP and NativePHP

vulnerability | Critical | 2026-10-24 05:43 | github.com | Original ↗ | .md | #rce | #zero-day | #github

2.

php2shell: Pure HTTP Full-Chain RCE and ASLR Bypass on Stock PHP 8.4 Configurations

research | Actively exploited | 2026-10-22 10:36 | CVE-2026-109618 | github.com | Original ↗ | .md | #active-exploitation | #rce | #github

3.

Ghost in the PHP2Shell: Why coordinated disclosure and patching will start moving faster

blog | 2026-10-29 00:00 | aikido.dev | Original ↗ | .md | #php | #aikido | #vdp

4.

PHP2shell: Patch Today, Then Prove It

blog | 2026-10-27 15:44 | xbow.com | Original ↗ | .md | #php | #xbow | #php2shell

5.

PHP2Shell: Exploitation Attempts and Remediation Trends

blog | 2026-10-27 13:21 | wiz.io | Original ↗ | .md | #wiz | #php2shell

6.

How to patch PHP2Shell with free Aikido Images

blog | 2026-10-26 00:00 | aikido.dev | Original ↗ | .md | #rce | #php | #authentication

7.

php2shell: The exploitability gap between frontier and open models

blog | 2026-10-26 00:00 | hacktron.ai | Original ↗ | .md | #ai-security | #hacktron | #php2shell

8.

Hunting Leaked PHP2Shell RCE Across Open Directories (CVE-2026-109618, CVE-2026-109619)

vulnerability | 2026-10-22 00:00 | hunt.io | Original ↗ | .md | #rce | #php | #cve

9.

PHP2Shell: Critical PHP RCE (CVE-2026-109618, CVE-2026-109619)

vulnerability | 2026-10-22 00:00 | hacktron.ai | Original ↗ | .md | #ai-security | #rce | #php

10.

PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet

vulnerability | 2026-10-21 13:59 | wiz.io | Original ↗ | .md | #ai-security | #rce | #php

11.

PHP2Shell x Burp Suite: Detection in your hands within a day of disclosure

blog | 2026-10-23 13:50 | portswigger.net | Original ↗ | .md | #burp-suite | #php | #cve

12.

What you need to know about PHP2shell. Critical vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619)

vulnerability | 2026-10-21 00:00 | aikido.dev | Original ↗ | .md | #rce | #php | #vulnerability

13.

PHP2Shell Unauthenticated RCE on PHP: CVE-2026-109618 & CVE-2026-109619

vulnerability | 2026-10-21 00:00 | netspi.com | Original ↗ | .md | #rce | #php | #pre-auth

14.

Behind the scenes of PHP2Shell: What the last 72 hours taught us

blog | 2026-10-23 17:05 | bugcrowd.com | Original ↗ | .md | #bugcrowd | #php2shell

15.

PHP2Shell: finding and patching affected PHP

research | 2026-10-22 11:11 | projectdiscovery.io | Original ↗ | .md | #bug-bounty | #vulnerability-research | #php

16.

PHP2Shell: GitLab helps find and remediate critical PHP flaws

blog | 2026-10-22 12:00 | about.gitlab.com | Original ↗ | .md | #gitlab | #remediation | #php

17.

Assetnote Releases php2shell-scanner: High-Fidelity Scanner for CVE-2026-109618 & CVE-2026-109619

tool | 2026-10-22 03:53 | github.com | Original ↗ | .md | #rce | #github | #php

18.

Obstacles to Weaponizing PHP2Shell Likely Constrain Immediate Widespread Exploitation

blog | 2026-10-23 00:00 | crowdstrike.com | Original ↗ | .md | #crowdstrike | #assessment | #weaponization

19.

CrowdStrike Protects Customers from Threats Delivered via PHP2Shell

research | 2026-10-21 00:00 | crowdstrike.com | Original ↗ | .md | #rce | #vulnerability-research | #php

20.

Critical PHP Vulnerabilities: What Security Teams Need to Know

blog | 2026-10-21 16:16 | hackerone.com | Original ↗ | .md | #php | #vdp | #hackerone