🧰 WatchTowr

The items that name it 26

• PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress
  articleas tools2026-10-30

  Security firm that observed successful PHP2Shell exploitation from a single German IP address.

• Tech and Security Companies Respond to PHP2Shell Vulnerabilities
  articleas classification.key entities2026-10-22
• PHP2Shell Exploitation Started Days Before Patches
  articleas classification.key entities2026-10-22
• PHP critical vulnerabilities rated 9.2 as attacks emerge and sites go offline
  articleas classification.key entities2026-10-21
• PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors
  articleas classification.key entities2026-10-21
• PHP Panic: Two Critical Bugs Put 70% of the Internet at Risk, and Everyone Is Freaking Out
  articleas classification.key entities2026-10-21
• PHP Remote Code Execution ("PHP2Shell" CVE-2026-109618 & CVE-2026-109619)
  advisoryas classification.key entities2026-10-21
• Critical PHP “PHP2Shell” RCE Vulnerabilities Allow Unauthenticated Remote Code Execution (CVSS 9.2)
  advisoryas tools2026-10-21It is written here as watchTowr (security firm that confirmed the flaws and reproduced CVE-2026-109618).

  security firm that confirmed the flaws and reproduced CVE-2026-109618

• eness/php2shell-CVE-2026-109618-CVE-2026-109619-PoC
  repoas classification.key entities2026-10-21
• PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws
  articleas classification.key entities2026-10-21
• Rapid Response: php2shell, Leaked Critical PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619)
  advisoryas classification.key entities2026-10-21
• Frequently Asked Questions About PHP Remote Code Execution (PHP2Shell CVE-2026-109618 & CVE-2026-109619)
  advisoryas classification.key entities2026-10-20
• Ivanti Connect Secure Authentication Bypass by Spoofing (CVE-2026-104935)
  advisoryas classification.key entities2026-10-13
• Dark Web Intelligence (@DailyDarkWeb) on X
  threadas classification.key entities2026-10-12
• Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578)
  writeupas classification.key entities2026-10-09
• Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication
  articleas classification.key entities2026-10-08
• Post-Exploitation Analysis & Artifacts – Citrix NetScaler CVE-2026-88771
  writeupas classification.key entities2026-10-07
• Atlassian Patches Critical Vulnerability Affecting 8 Products
  advisoryas tools2026-10-07

  Preemptive exposure management firm; provided threat intelligence commentary on CVE-2026-21589 and recommended mitigations.

• You Won’t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589)
  writeupas classification.key entities2026-10-06
• Atlassian Jira, Confluence (and more) Arbitrary File Read Vulnerability (CVE-2026-21589)
  advisoryas classification.key entities2026-10-06
• Frequently Asked Questions About the Atlassian Jira & Confluence Arbitrary File Read Vulnerability (CVE-2026-21589)
  advisoryas classification.key entities2026-10-06
• Is This A Joke? In The Auth Header? (F5 BIG-IP UnAuth Heap-Overflow to RCE CVE-2026-94127)
  writeupas classification.key entities2026-09-23
• [tl;dr sec] #346 - Can AI Do Novel Security Research?, Anthropic's Threat Intel Report, How Cloudflare Enforces Engineering Standards
  articleas classification.key entities2026-09-17
• watchTowr Labs: Splunk Enterprise CVE-2026-20253 Pre-Auth RCE via PostgreSQL Sidecar
  writeupas classification.key entities2026-06-12
• CVE-2026-41940: cPanel & WHM Pre-Auth RCE — Two Write Paths, One Filter
  writeupas classification.key entities2026-05-01
• Huntress Catches SmarterMail Account Takeover Leading to RCE
  advisoryas classification.key entities2026-01-22