Mmastodon TechnologySoftware first seen 2 d ago, last 2 d ago, peak #8
PHP2Shell attacks ramp up as admins delay patching
Original: “The PHP panic has not turned to patching: And that’s bad news, capital B, as PHP2Shell attacks ramp up. We know the pai
Security teams are warning that a pair of critical PHP vulnerabilities, tracked as CVE-2026-109618 and CVE-2026-109619 and dubbed PHP2Shell, carry a CVSS score of 9.2 and are now being actively exploited. Despite the panic when the flaws were disclosed, administrators have not rushed to apply patches, allowing PHP2Shell attacks that turn vulnerable servers into remote shells to accelerate. Commenters are urging immediate updates, warning that the gap between disclosure and patching is widening the attack window.
Why now: Actively exploited critical PHP flaws remain largely unpatched, raising the risk of widespread server compromises.
PHPCVE-2026-109618CVE-2026-109619PHP2Shell
Evidence
- “The PHP panic has not turned to patching: And that’s bad news, capital B, as PHP2Shell attacks ramp up. We know the paired PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, aka PHP2Shell, have a Common Vulnerability Scoring System (CVSS) score of 9.2, which is scary… · remixtures@tldr.nettime.org · 5
API: https://socialmediatrends-api.osmike.com/v1/trends/4078426