Critical PHP2Shell Exploit Code Goes Public as Hackers Attempt to Deploy Botnet Malware

Public proof-of-concept code for two critical PHP vulnerabilities is now available, and attackers have tried to use the flaws to deploy botnet malware. Known together as PHP2Shell, CVE-2026-109618 and CVE-2026-109619 both carry a CVSS severity score of 9.2 and can allow attackers to run code without logging in. However, attempted exploitation must not be confused […]

Read the original article:

Critical PHP2Shell Exploit Code Goes Public as Hackers Attempt to Deploy Botnet Malware