Mmastodon TechnologyCybersecurity first seen 1 d ago, last 1 d ago, peak #12
PHP2Shell vulnerability wave CVE-2026-109618 sparks security alarm
Original: The wire is full of PHP2Shell. If you've watched security feeds tonight, you've seen the panic over CVE-2026-109618 and
Cybersecurity circles are reacting to a pair of newly circulated PHP vulnerabilities tagged PHP2Shell, tracked as CVE-2026-109618 and CVE-2026-109619. Early chatter describes them as an exploit chain that could let attackers turn PHP flaws into remote code execution, with some calling it a total protocol collapse. Others caution it is typical PHP behaviour, and references to healthcare targets are fuelling concern among defenders reviewing their exposure.
Why now: Newly disclosed PHP vulnerabilities with potential remote code execution are spreading rapidly through security feeds, prompting urgent patching discussions.
PHPCVE-2026-109618CVE-2026-109619PHP2Shell
Evidence
- The wire is full of PHP2Shell. If you've watched security feeds tonight, you've seen the panic over CVE-2026-109618 and CVE-2026-109619. It sounds like a total protocol collapse, and it's just PHP being PHP. https:// theperimetersite.com/report/409 # vulnerability # healthcare… · theperimetersite@infosec.exchange · 1
API: https://socialmediatrends-api.osmike.com/v1/trends/3914054