MEDIUMVulnerability
Global

PHP2Shell (CVE-2026-109618/109619): first exploit requests arrived 5.5 hours before PHP shipped the fix, and the "scanners" carry Mirai-style loaders

·Source: r/netsec

Updated:

Executive Summary

[object Object]

Analysis

[object Object]

Indicators of Compromise (1)

CVE (1)
CVE-2026-109618
NVDMITRE CVE
Source Attribution

Originally published by r/netsec on Oct 21, 2026.

Related Threats

MEDIUMVulnerability

Indian tech company eMudhra announces withdrawal from certificate business after security incident

The issue was publicized by cybersecurity researcher Scott Helme, who published a blog saying that instead of a random 384-bit number, one of the company's private keys was just the number four.

The Record
MEDIUMVulnerability

eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable

eMudhra, an Indian certificate authority (CA), will withdraw from its global SSL/TLS certificate business, its board decided on Thursday. The decision came five days after a researcher reported recovering the private keys of eight of its intermediate CA certificates. eMudhra said it will replace affected customers' certificates with free ones from partners, though its

The Hacker News
CRITICALVulnerability

I had plans for that second

The Earth is speeding up, the leap second is being abolished, oh, and there's critical vulnerabilities in PHP.

Cisco Talos