What happened
Exploit for PHP2Shell.
Affected versions
Unknown product: See original advisory Fixed: See vendor advisory.
Why it matters
This source correlation may provide earlier visibility while structured CVE metadata is still being updated.
Detection & mitigation
- Review the original advisory and validate affected versions.
- Apply vendor-provided updates or mitigations when available.
Public PoC references
RepositoryAuthorFirst seenReference
SploitusExploit for PHP2Shell.eness2026-10-21T08:32:25VerifiedSploitusHeap use-after-free in PHP session.upload_progress allows code execution.darkfibr2026-10-21T08:31:15VerifiedSploitusUnauthenticated remote code execution in PHP core.orbitron-ai2026-10-21T08:47:18VerifiedSploitusProof-of-concept exploit for CVE-2026-109618 and CVE-2026-109619.Sploitus index2026-10-21T07:57:41+00:00CandidateSploitusProof-of-concept exploit for CVE-2026-109618 and CVE-2026-109619.Sploitus index2026-10-21T07:55:16+00:00CandidateSploitusProof-of-concept exploit for CVE-2026-109618 and CVE-2026-109619.Sploitus index2026-10-21T07:40:59+00:00CandidateSploitusProof-of-concept exploit for CVE-2026-109618 and CVE-2026-109619.Sploitus index2026-10-21T07:35:51+00:00CandidateSploitusProof-of-concept exploit for CVE-2026-109618 and CVE-2026-109619.Sploitus index2026-10-21T07:29:15+00:00CandidateSploitusProof-of-concept exploit for CVE-2026-109618 and CVE-2026-109619.Sploitus index2026-10-21T06:28:50+00:00CandidateSploitusProof-of-concept exploit for CVE-2026-109618 and CVE-2026-109619.Sploitus index2026-10-21T06:19:55+00:00CandidateSploitusProof-of-concept exploit for CVE-2026-109618 and CVE-2026-109619.Sploitus index2026-10-21T05:42:32+00:00Candidateeness/PHP2Shell-CVE-2026-109618-CVE-2026-109619-PoCExploit for PHP2Shell.eness2026-10-21T08:32:25Verifieddarkfibr/php2shell-detectHeap use-after-free in PHP session.upload_progress allows code execution.darkfibr2026-10-21T08:31:15VerifiedSploitusphp2shell-watch watchdog script detects php2shell exploit artifacts on PHP-FPM servers.Autive2026-10-21T08:25:42CandidateAutive/php2shell-watchphp2shell-watch watchdog script detects php2shell exploit artifacts on PHP-FPM servers.Autive2026-10-21T08:25:42Candidateorbitron-ai/php2shell-response-kitUnauthenticated remote code execution in PHP core.orbitron-ai2026-10-21T08:47:18VerifiedSource timeline
Discovered through SploitusView source ↗
Record history
Record created from the first normalized source observation.
Metadata and source references refreshed.