Warning Against Vulnerabilities Exploited in Actual Attacks (PHP)
The US Cybersecurity and Infrastructure Security Agency (CISA) has released a list of vulnerabilities currently being exploited in attacks. The affected product is PHP. CVE-2026-109618 is a memory corruption vulnerability that occurs under memory-starved conditions. CVE-2026-109619 is a vulnerability involving a reference to an outdated internal request state. CISA has
The Weak Link Identified by AI: October 2026, When the Outer Contact Point Collapsed
Security Blind Spots Identified by AI The large-scale data breaches disclosed in quick succession in South Korea and Japan in October 2026 mostly originated not from internal core systems, but from peripheral entry points such as externally exposed web services, app backend APIs, and outsourced SaaS (services provided by third-party
PHP Product Security Update Advisory
A security update has been released to address vulnerabilities in PHP. This update applies to versions of PHP prior to 8.2.35, 8.3.36, 8.4.27, And 8.5.12. The vulnerabilities addressed are CVE-2026-109618, an improper exception handling vulnerability in PHP, and CVE-2026-109619, a use-after-free vulnerability in PHP. The reference site indicates that both
Analysis of the GitHub “php2shell” Repository: Public PoCs and Defense Tools That Spread Immediately After the Disclosure of the PHP Vulnerability
Overview Immediately after the PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 were disclosed on October 21, 2026, a large number of repositories named “php2shell” were created in a short period of time on GitHub, a code repository platform. Of the top 100 repositories (excluding forks) found by searching for “php2shell,” 99 addressed
Reproducing the PHP2Shell Vulnerability and Detection Using AhnLab EDR/XDR
On October 22, 2026, the PHP Security Team announced in an advisory that it would release security updates addressing the vulnerabilities CVE-2026-109618 and CVE-2026-109619. Although the causes of the two vulnerabilities differ, they are both remote code execution vulnerabilities that allow an unauthenticated threat actor to execute arbitrary code remotely.
[Urgent Notice] CVE-2026-109618 / CVE-2026-109619 (CVSS 9.2) PHP2Shell – Critical PHP RCE Vulnerability
Overview Two remote code execution (RCE) vulnerabilities (vulnerabilities that allow a threat actor to execute arbitrary code remotely) have been identified in PHP. These vulnerabilities are identified as CVE-2026-109618 and CVE-2026-109619, and have each been reported with a CVSS score of 9.2 And a severity rating of “Critical.” Impact It
