New CRITICAL PHP vulnerability
- Thread starter bigredfish
- Start date
IPCT is safe! We are above 8.1
Way over my head but I'm seeing guys talking about patching above 8.1 - FYI
You are not safe from these new vulnerabilities. You must updateIPCT is safe! We are above 8.1
PHP: News Archive - 2026
PHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.
www.php.net
Fascinating. Amazon says it has telemetry showing PHP2Shell was being exploited on Oct. 17—that is, four days prior to public disclosure.
Not known who was doing it. "It remains unclear how the actor acquired exploit information prior to disclosure."
aws.amazon.com
Not known who was doing it. "It remains unclear how the actor acquired exploit information prior to disclosure."
Amazon Threat Intelligence identifies PHP2Shell exploitation prior to public disclosure in MadPot | Amazon Web Services
Amazon Threat Intelligence identified a PHP2Shell exploitation attempt dating to Oct. 17, 2026, in MadPot telemetry, four days before public disclosure of CVE-2026-109618 and CVE-2026-109619. The exploit attempt originated from an IP address associated with a commercial anonymization network...
aws.amazon.com
Fascinating. Amazon says it has telemetry showing PHP2Shell was being exploited on Oct. 17—that is, four days prior to public disclosure.
Not known who was doing it. "It remains unclear how the actor acquired exploit information prior to disclosure."
Amazon Threat Intelligence identifies PHP2Shell exploitation prior to public disclosure in MadPot | Amazon Web Services
Amazon Threat Intelligence identified a PHP2Shell exploitation attempt dating to Oct. 17, 2026, in MadPot telemetry, four days before public disclosure of CVE-2026-109618 and CVE-2026-109619. The exploit attempt originated from an IP address associated with a commercial anonymization network...
Could be the original team that discovered this did some anonymous in the wild testing... or they sold the info to bad actors