Mmastodon TechnologyCybersecurity first seen 22 h ago, last 22 h ago, peak #11
PHP2Shell critical PHP vulnerability triggers security warnings
Original: Dependabot: alles grün. Dein PHP: trotzdem betroffen. PHP2Shell (CVE-2026-109618) ist eine kritische RCE im PHP-Kern, au
A critical remote code execution flaw in the PHP core, dubbed PHP2Shell and tracked as CVE-2026-109618, can reportedly be exploited without login. Security experts warn that automated dependency scanners like Dependabot will not catch it because they check packages, not the runtime itself. Users are advised to run php -v and update to fixed versions 8.2.35, 8.3.36, 8.4.27 or 8.5.12, then restart workers.
Why now: A newly disclosed unauthenticated RCE in the PHP core affects servers even when dependency checks pass, prompting admins to verify their PHP versions.
PHPDependabotGitHubCVE-2026-109618
Evidence
- Dependabot: alles grün. Dein PHP: trotzdem betroffen. PHP2Shell (CVE-2026-109618) ist eine kritische RCE im PHP-Kern, ausnutzbar ohne Login. Dependabot prüft Pakete, nicht deine Runtime. Check: php -v Gefixt ab 8.2.35, 8.3.36, 8.4.27, 8.5.12. Darunter: updaten und Worker neu… · stackwatch@infosec.exchange · 1
API: https://socialmediatrends-api.osmike.com/v1/trends/3619742