(Reliable)? php2shell exploitability, (Fri, Oct 23rd)
2026-10-25T19:23:40Z•bc34b9be6cebc953f2efa1475e2b9527ae577adf9fdc9b4e99c1f440939f1d48
CVE-2026-109618CVE-2026-109619AI securityCVEDWGPHPVBAYARAcritical vulnerabilityexploitationphp2shellproof of conceptremote code execution
What happened
SANS Internet Storm Center entries report a critical PHP vulnerability pair, CVE-2026-109618 and CVE-2026-109619, with CVSS 9.4, widespread exposure, and early proof-of-concept exploitation before patches were available. Follow-up coverage discusses exploitability and a return to normal alert status. The feed also includes unrelated security content on malicious VBA projects in DWG files and AI agent security.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- bc34b9be6cebc953f2efa1475e2b9527ae577adf9fdc9b4e99c1f440939f1d48
- Enrichment time
- 2026-10-25T19:23:40Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.