[SecList]Critical RCE vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619)

[igor51]

Critical RCE vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619)

We discuss the incident involving the leak of information about vulnerabilities CVE-2026-109618 and CVE-2026-109619. Kaspersky solutions detect the PHP2Shell exploit: we’ll walk you through examples using KEDR, KATA, and KES.
Source: Critical RCE vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619)