EXPLOIT/ALERT Back to feed

Exploit for CVE-2026-109618 CVE-2026-109618 CVE-2026-109619

Exploit for PHP2Shell.

Published 21 Oct 2026Updated 21 Oct 202617 sources
CVSS 6.5 ✓ VERIFIED REFERENCE
Overview Sources History

What happened

Exploit for PHP2Shell.

Affected versions

Unknown product: See original advisory Fixed: See vendor advisory.

Why it matters

This source correlation may provide earlier visibility while structured CVE metadata is still being updated.

Detection & mitigation

  • Review the original advisory and validate affected versions.
  • Apply vendor-provided updates or mitigations when available.

Public PoC references

RepositoryAuthorFirst seenReference
SploitusExploit for PHP2Shell.eness2026-10-21T08:32:25VerifiedSploitusHeap use-after-free in PHP session.upload_progress allows code execution.darkfibr2026-10-21T08:31:15VerifiedSploitusUnauthenticated remote code execution in PHP core.orbitron-ai2026-10-21T08:47:18VerifiedSploitusProof-of-concept exploit for CVE-2026-109618 and CVE-2026-109619.Sploitus index2026-10-21T07:57:41+00:00CandidateSploitusProof-of-concept exploit for CVE-2026-109618 and CVE-2026-109619.Sploitus index2026-10-21T07:55:16+00:00CandidateSploitusProof-of-concept exploit for CVE-2026-109618 and CVE-2026-109619.Sploitus index2026-10-21T07:40:59+00:00CandidateSploitusProof-of-concept exploit for CVE-2026-109618 and CVE-2026-109619.Sploitus index2026-10-21T07:35:51+00:00CandidateSploitusProof-of-concept exploit for CVE-2026-109618 and CVE-2026-109619.Sploitus index2026-10-21T07:29:15+00:00CandidateSploitusProof-of-concept exploit for CVE-2026-109618 and CVE-2026-109619.Sploitus index2026-10-21T06:28:50+00:00CandidateSploitusProof-of-concept exploit for CVE-2026-109618 and CVE-2026-109619.Sploitus index2026-10-21T06:19:55+00:00CandidateSploitusProof-of-concept exploit for CVE-2026-109618 and CVE-2026-109619.Sploitus index2026-10-21T05:42:32+00:00Candidateeness/PHP2Shell-CVE-2026-109618-CVE-2026-109619-PoCExploit for PHP2Shell.eness2026-10-21T08:32:25Verifieddarkfibr/php2shell-detectHeap use-after-free in PHP session.upload_progress allows code execution.darkfibr2026-10-21T08:31:15VerifiedSploitusphp2shell-watch watchdog script detects php2shell exploit artifacts on PHP-FPM servers.Autive2026-10-21T08:25:42CandidateAutive/php2shell-watchphp2shell-watch watchdog script detects php2shell exploit artifacts on PHP-FPM servers.Autive2026-10-21T08:25:42Candidateorbitron-ai/php2shell-response-kitUnauthenticated remote code execution in PHP core.orbitron-ai2026-10-21T08:47:18Verified
CorrectionsReport an issue