php2shell: Assessing Elastic detection coverage relevant to CVE-2026-109618 and CVE-2026-109619

CVE-2026-109618 and CVE-2026-109619 are critical PHP core RCE flaws that leaked ahead of disclosure. We cover what is verified, why exploitation converges on a web server spawning a shell, and the Elastic detections developed to catch this behavior.

This article has been indexed from Elastic Security Labs