search
PHP2Shell exploit
Trends
- 1Chained PHP2Shell exploit compromises 25 servers including US government systems●Chained PHP2Shell exploit roots 25 servers, including US Government servers
A chained exploit dubbed PHP2Shell has been used to gain root access on 25 servers, including machines belonging to the United States government, according to a write-up by DreamGroup. The attack chains PHP-related vulnerabilities to escalate privileges to root. The disclosure is drawing attention because of the government targets and the severity of full root compromise.
Repos
- ikow/php2shell-poc CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-
- eness/php2shell-CVE-2026-109618-CVE-2026-109619-PoC Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in
- 9bie/php2shell-bypass-aslr-exp A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit