CRITICALVulnerability
Global

Critical RCE vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619)

·Source: Securelist (Kaspersky)

Updated:

Executive Summary

We discuss the incident involving the leak of information about vulnerabilities CVE-2026-109618 and CVE-2026-109619. Kaspersky solutions detect the PHP2Shell exploit: we’ll walk you through examples using KEDR, KATA, and KES.

Analysis

We discuss the incident involving the leak of information about vulnerabilities CVE-2026-109618 and CVE-2026-109619. Kaspersky solutions detect the PHP2Shell exploit: we’ll walk you through examples using KEDR, KATA, and KES.

Indicators of Compromise (2)

CVE (2)
CVE-2026-109618
NVDMITRE CVE
CVE-2026-109619
NVDMITRE CVE
Source Attribution

Originally published by Securelist (Kaspersky) on Oct 21, 2026.

Related Threats

MEDIUMVulnerabilityNEW

LSEG to acquire data provider Octus for $3.5bn

The London Stock Exchange (LSEG) has agreed to acquire credit data provider Octus in a cash deal worth $3.535bn.

Finextra
MEDIUMVulnerabilityNEW

PHP2Shell Exploitation Started Days Before Patches

Initial attempts were observed on October 17, and mass activity began shortly after patches were released. The post PHP2Shell Exploitation Started Days Before Patches appeared first on SecurityWeek .

SecurityWeek
MEDIUMVulnerability

Cloud Security Maturity Lags Despite Widespread Adoption, SANS Warns

Nearly all organizations now run production workloads in the cloud, but a new SANS survey found most have yet to achieve mature cloud security programs

Infosecurity Magazine