🧰 PHP

The items that name it 118

• Was I wrong about open models & cyber risks?
  articleas affected products2026-10-30

  named among the October critical vulnerability disclosures

• PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress
  articleas affected products2026-10-30
• Fresh WordPress Vulnerability in Attackers’ Crosshairs
  articleas classification.technologies2026-10-30
• Drupal Commerce Core Vulnerability Exploited Against Online Stores
  articleas classification.technologies2026-10-30
• What are shell vulnerabilities? PHP2Shell, Node2Shell (HTTP2Shell), React2Shell and Log4Shell explained
  articleas affected products2026-10-29It is written here as PHP (vulnerable code dates to PHP 5.4, released in 2012; Aikido patched images cover PHP 5.5 through 8.5, apart from 8.0 and 8.1 for now).

  vulnerable code dates to PHP 5.4, released in 2012; Aikido patched images cover PHP 5.5 through 8.5, apart from 8.0 and 8.1 for now

• Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29)
  advisoryas affected products2026-10-29It is written here as PHP (CVE-2026-109618 and CVE-2026-109619, both RCE, CVSS 4.0 score 9.2; over 22.6 million exposed instances potentially vulnerable per Cortex Xpanse telemetry).

  CVE-2026-109618 and CVE-2026-109619, both RCE, CVSS 4.0 score 9.2; over 22.6 million exposed instances potentially vulnerable per Cortex Xpanse telemetry

• A quiet week in infosec <.<
  articleas affected products2026-10-29It is written here as PHP (two critical remote code execution vulnerabilities in PHP core, added to CISA KEV).

  two critical remote code execution vulnerabilities in PHP core, added to CISA KEV

• CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks
  articleas affected products2026-10-29It is written here as PHP: affected by CVE-2026-109618 and CVE-2026-109619 (PHP2Shell).

  affected by CVE-2026-109618 and CVE-2026-109619 (PHP2Shell)

• Ghost in the PHP2Shell: Why coordinated disclosure and patching will start moving faster
  articleas classification.technologies2026-10-29
• China-Linked Hackers Exploit PHP2Shell to Root Firewalls
  articleas affected products2026-10-28It is written here as PHP (PHP2Shell vulnerabilities CVE-2026-109618 and CVE-2026-109619; newer PHP releases were targeted).

  PHP2Shell vulnerabilities CVE-2026-109618 and CVE-2026-109619; newer PHP releases were targeted

• TLP Is Not a Suggestion
  articleas classification.technologies2026-10-28
• PHP2Shell: Exploitation Attempts and Remediation Trends
  articleas classification.technologies2026-10-27
• Introducing the Cloudflare PHP Capture the Flag challenge
  articleas classification.technologies2026-10-27
• How to patch PHP2Shell with free Aikido Images
  articleas classification.technologies2026-10-26
• Trail of Bits (@trailofbits) on X
  threadas classification.technologies2026-10-26
• CISA Adds Two Known Exploited Vulnerabilities to Catalog
  advisoryas affected products2026-10-26
• PHP2Shell: From the attacker’s perspective
  writeupas affected products2026-10-26It is written here as PHP (unpatched installations; fixed in 8.2.35, 8.3.36, 8.4.27 and 8.5.12 and later).

  unpatched installations; fixed in 8.2.35, 8.3.36, 8.4.27 and 8.5.12 and later

• Industrial Vendors Check Products for PHP2Shell Vulnerabilities
  articleas classification.technologies2026-10-26
• PHP2Shell Exploitation Moves From Probes to Working Shells
  articleas affected products2026-10-26It is written here as PHP (PHP2Shell vulnerabilities patched October 21, 2026).

  PHP2Shell vulnerabilities patched October 21, 2026

• Zex Alpha (@kryptozex) on X
  threadas classification.technologies2026-10-26
• Code security for new coders
  articleas classification.technologies2026-10-26
• Podcast: Kimi K3.1 Pro, the new cyber reality, and Muse musings
  talkas classification.technologies2026-10-25
• Everything, everywhere, all at once… the week software broke | Endor Labs
  articleas classification.technologies2026-10-24
• Crypto's Two Answers to AI Bug Hunters
  articleas classification.technologies2026-10-23
• CVE-2026-109618 / CVE-2026-109619 | NodeZero Rapid Response Check Now Available
  advisoryas affected products2026-10-23It is written here as PHP (all installations serving web requests, as identified by PHP).

  all installations serving web requests, as identified by PHP

• PHP2Shell: What This Week Tells Us About the Web We Built
  articleas classification.technologies2026-10-23
• Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge
  articleas classification.technologies2026-10-23
• Xavier Rivera (@XavierRiveraX) on X
  advisoryas classification.technologies2026-10-23
• Quest Diagnostics Reports Cyber Breach Affecting ‘Certain Patient Records’
  articleas classification.technologies2026-10-23
• Marcus Hutchins (@MalwareTechBlog) on X
  threadas classification.technologies2026-10-23
• Daily Vibe Casting (@vibecastingapp) on X
  threadas classification.technologies2026-10-22
• PHP2Shell Exposure Depends on More Than Whether You Use PHP
  articleas classification.technologies2026-10-22
• [tl;dr sec] #351 - PHP2Shell, Autopatching Skills, AWS Pathrunner
  articleas affected products2026-10-22It is written here as PHP (unauthenticated remote code execution vulnerability PHP2Shell affecting the past 13 years of PHP).

  unauthenticated remote code execution vulnerability PHP2Shell affecting the past 13 years of PHP

• Tech and Security Companies Respond to PHP2Shell Vulnerabilities
  articleas classification.technologies2026-10-22
• Paul Dragoonis (@dr4goonis) on X
  threadas affected products2026-10-22It is written here as PHP (2 Critical vulnerabilities; fixed in 8.2.35, 8.3.36, 8.4.27, 8.5.12).

  2 Critical vulnerabilities; fixed in 8.2.35, 8.3.36, 8.4.27, 8.5.12

• PHP2Shell Exploitation Started Days Before Patches
  articleas classification.technologies2026-10-22
• [AINews] OpenAI’s Patch the Planet program is 1 of 2 parties to discover PHP2Shell vulnerabilities in core PHP affecting 70% of the web, using GPT-5.6 Sol; coordinated response over 2 months
  articleas classification.technologies2026-10-22
• [AINews] OpenAI’s Patch the Planet program is 1 of 2 parties to discover PHP2Shell vulnerabilities in core PHP affecting 70% of the web, using GPT-5.6 Sol; coordinated response over 2 months
  articleas classification.technologies2026-10-22
• PHP Patches Two Critical Unauthenticated RCEs (CVE-2026-109618, CVE-2026-109619): Update Now
  advisoryas classification.technologies2026-10-22
• Using AWS WAF to apply mitigations for PHP2Shell RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619)
  articleas classification.technologies2026-10-22
• There isn't an easy exploit for this PHP vulnerability
  articleas affected products2026-10-21It is written here as PHP (unspecified vulnerability, posted about 10 hours before the page's 21 October 2026 date; author says no working exploit exists against a vanilla PHP instance).

  unspecified vulnerability, posted about 10 hours before the page's 21 October 2026 date; author says no working exploit exists against a vanilla PHP instance

• Amazon Threat Intelligence identifies PHP2Shell exploitation prior to public disclosure in MadPot
  articleas affected products2026-10-21It is written here as PHP (versions not stated on the page; fixed PHP versions were released on 2026-10-21 1400 UTC, when the embargo lifted).

  versions not stated on the page; fixed PHP versions were released on 2026-10-21 1400 UTC, when the embargo lifted

• Trail of Bits (@trailofbits) on X
  threadas classification.technologies2026-10-21
• PHP web runtimes (CVE-2026-109618 and CVE-2026-109619)
  advisoryas classification.technologies2026-10-21
• PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
  articleas affected products2026-10-21It is written here as PHP (web servers running PHP; unauthenticated remote code execution via CVE-2026-109618 and CVE-2026-109619).

  web servers running PHP; unauthenticated remote code execution via CVE-2026-109618 and CVE-2026-109619

• Today's PHP Security Release, and How We're Strengthening PHP Security
  articleas classification.technologies2026-10-21
• PHP critical vulnerabilities rated 9.2 as attacks emerge and sites go offline
  articleas classification.technologies2026-10-21
• Remotely exploitable PHP bug found on 70% of world’s websites
  articleas classification.technologies2026-10-21
• PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors
  articleas classification.technologies2026-10-21
• PHP2Shell: Critical vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) | Endor Labs
  advisoryas classification.technologies2026-10-21
• Today's PHP security release, and how we're strengthening security
  articleas classification.technologies2026-10-21
• PHP Panic: Two Critical Bugs Put 70% of the Internet at Risk, and Everyone Is Freaking Out
  articleas classification.technologies2026-10-21
• PHP Patches Critical RCE Vulnerabilities, Organizations Urged to Take Unpatched Sites Offline
  articleas classification.technologies2026-10-21
• Two critical RCEs in PHP core
  advisoryas classification.technologies2026-10-21
• PHP Remote Code Execution ("PHP2Shell" CVE-2026-109618 & CVE-2026-109619)
  advisoryas classification.technologies2026-10-21
• Cloudflare deploys protections against php2shell vulnerability
  articleas classification.technologies2026-10-21
• Critical PHP “PHP2Shell” RCE Vulnerabilities Allow Unauthenticated Remote Code Execution (CVSS 9.2)
  advisoryas classification.technologies2026-10-21
• PHP 8.2.35
  advisoryas classification.technologies2026-10-21
• PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet
  writeupas classification.technologies2026-10-21
• eness/php2shell-CVE-2026-109618-CVE-2026-109619-PoC
  repoas classification.technologies2026-10-21
• ikow/php2shell-poc
  repoas classification.technologies2026-10-21
• PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws
  articleas classification.technologies2026-10-21
• Rapid Response: php2shell, Leaked Critical PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619)
  advisoryas classification.technologies2026-10-21
• Critical vulnerabilities in PHP (PHP2SHELL)
  advisoryas classification.technologies2026-10-21
• PHP2Shell - Critical vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619): detection, analysis, and remediation
  writeupas classification.technologies2026-10-21
• Upcoming Critical PHP Security Release
  advisoryas affected products2026-10-20It is written here as PHP (two unnamed critical vulnerabilities, each rated CVSS v4.0 9.2, Critical; affected versions not stated).

  two unnamed critical vulnerabilities, each rated CVSS v4.0 9.2, Critical; affected versions not stated

• Frequently Asked Questions About PHP Remote Code Execution (PHP2Shell CVE-2026-109618 & CVE-2026-109619)
  advisoryas affected products2026-10-20It is written here as PHP (every installation serving web requests, including PHP-FPM, Apache mod_php, php-cgi, LiteSpeed and FrankenPHP).

  every installation serving web requests, including PHP-FPM, Apache mod_php, php-cgi, LiteSpeed and FrankenPHP

• Upcoming Critical PHP Security Release
  advisoryas classification.technologies2026-10-20
• Rank Math PRO WordPress Plugin Compromised in Supply Chain Attack
  articleas classification.technologies2026-10-19
• Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day
  articleas classification.technologies2026-10-16
• AI-Powered Espionage Campaign Targets Government Linux Infrastructure
  articleas classification.technologies2026-10-15
• ARMORY CASTLE Exploits BeyondTrust
  writeupas classification.technologies2026-10-15
• Bricksforge WordPress Plugin Vulnerability Exploited in the Wild
  articleas classification.technologies2026-10-12
• lee1981 (@lee1981b) on X
  advisoryas classification.technologies2026-10-10
• Ned Peterson (@NedPeterson99) on X
  threadas classification.technologies2026-10-09
• Post-Exploitation Analysis & Artifacts – Citrix NetScaler CVE-2026-88771
  writeupas classification.technologies2026-10-07
• CITRIX 0-DAY EXPLOITS: CVE-2026–88771 & CVE-2026–88772 IN THE WILD
  writeupas classification.technologies2026-10-06
• SMTP is the key: BPFDoor and AVERAT hitting the network edge
  writeupas classification.technologies2026-10-02
• Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild (Updated September 30)
  advisoryas classification.technologies2026-09-30
• Defending Against Active Exploitation of Citrix NetScaler ADC and Gateway Appliances
  writeupas classification.technologies2026-09-29
• WordPress “Comment2Shell” XSS-to-RCE Chain Lets Unauthenticated Attackers Compromise Servers via Malicious Comments
  advisoryas classification.technologies2026-09-22
• WordPress 7.1.2 Release (CVE-2026-87902 path-traversal RCE fix)
  advisoryas classification.technologies2026-09-22
• PolinRider Spreads Through Compromised GitHub Accounts and Packagist
  articleas classification.technologies2026-09-17
• WordPress Security Skills
  repoas affected products2026-09-15

  used as syntax baseline for examples; noted as end-of-life

• shinthink/blitzstrike
  repoas affected products2026-09-12

  language covered by Blitz Strike's source analysis and benchmark suite (sink classes, coverage matrix)

• vet (SafeDep)
  repoas affected products2026-09-07

  Package manager ecosystem supported/scanned by vet

• Socket: FUNNULL iOS Spyware Campaign via 13 Malicious Packagist Themes
  writeupas classification.technologies2026-09-01
• Socket: PHP and Composer Support Reaches Beta With Reachability Analysis
  articleas classification.technologies2026-08-22
• Critical Elementor Pro File Upload Flaw Enables Unauthenticated Remote Code Execution on WordPress Sites
  advisoryas classification.technologies2026-08-20
• Nothing Private
  repoas tools2026-08-14

  backend language used by Nothing Private

• Static Analysis Tools & Linters
  repoas classification.technologies2026-08-09
• PolinRider Caused Dozens of npm, Go, PHP Compromises
  writeupas classification.technologies2026-07-31
• INC RANSOMWARE: THREAT INTELLIGENCE
  writeupas classification.technologies2026-07-24
• Master Urlscan.io Dorking for Bug Bounty Hunting
  videoas technologies2026-07-23
• Socket: GitHub Actions Abuse Powers Distributed cPanel/WHM Exploitation Campaign
  writeupas classification.technologies2026-07-23
• Exploitation in the Wild of wp2shell
  writeupas classification.technologies2026-07-20
• AI Security Briefing
  advisoryas classification.technologies2026-07-18
• The OpenSourceMalware Show #12
  talkas classification.technologies2026-07-09
• Authentication Bypass in the default configuration phpBB
  writeupas classification.technologies2026-07-03
• Packagist is now protected by Aikido Intel and other updates to the PHP registry
  articleas classification.technologies2026-06-26
• Orca: CVE-2026-45034 PhpSpreadsheet RCE Patch Bypass
  advisoryas classification.technologies2026-06-12
• Laravel-Lang Supply Chain Attack: Every Tag Across Multiple Composer Packages Rewritten to Steal CI Secrets
  writeupas classification.technologies2026-06-02
• Socket: Famous Chollima Targets PHP Developers via Compromised Packagist Package
  writeupas classification.technologies2026-06-01
• Socket: Malicious Postinstall Hook Compromises 8 PHP/Node Packages on Packagist
  writeupas classification.technologies2026-05-23
• Supply Chain Attack Targets Laravel-Lang Packages with Credential Stealer
  writeupas classification.technologies2026-05-23
• Socket: Packagist Urges Immediate Composer Update After GitHub Actions Token Leak
  advisoryas classification.technologies2026-05-13
• knostic/OpenAnt
  repoas affected products2026-05-12

  supported language for scanning (beta)

• Dissection of a PHP Backdoor leveraging php-win.exe
  writeupas affected products2025-11-16

  php-win.exe (GUI-mode PHP binary) and php.exe used to execute malicious PHP script; installation source noted as C:\php8.4

• From Dangerous PHP Functions to Webshell Hunting
  writeupas affected products2024-06-17

  disable_functions directive configured in /etc/php/8.0/apache2/php.ini

• PHP's open_basedir is not a security feature
  writeupas affected products2021-12-19

  Version tested for open_basedir bypass research; author notes it is likely patched in later versions

• Rekt - News or Hype?
  articleas affected productsIt is written here as PHP (every installation serving web requests, per the PHP advisory; used by 69.3% of websites whose server-side language is known, per W3Techs as of October 22).

  every installation serving web requests, per the PHP advisory; used by 69.3% of websites whose server-side language is known, per W3Techs as of October 22

• Search Search results for "security" | MCP Market
  otheras classification.technologies
• Weekly Research Brief: PHP Vulnerability; Objections to OKX-ICE’s Stock Tokenization; Solana Alpenglow Ships
  articleas classification.technologies
• CISA: Critical Vulnerabilities in PHP Require Immediate Patching
  advisoryas classification.technologies
• PHP2Shell: pre-auth RCE via PHP memory-limit fatal errors (CVE-2026-109618/109619)
  writeupas affected productsIt is written here as PHP (Calif write-up PHP2Shell; patched versions released per the PHP October 2026 Security Release).

  Calif write-up PHP2Shell; patched versions released per the PHP October 2026 Security Release

• Sizing the PHP exposure window for CVE-2026-109618 and CVE-2026-109619 with VirusTotal
  articleas classification.technologies
• CISA AA26-281A: Chinese Government-linked Actors Combine Automated and Hands-on Hacking Tools to Steal Data
  advisoryas classification.technologies
• Attackers Exploit WordPress CVE-2026-87902 Within Hours of Patch
  advisoryas classification.technologies