CRITICALVulnerability
Global

PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws

·Source: SecurityWeek

Updated:

Executive Summary

Tracked as CVE-2026-109618 and CVE-2026-109619, the bugs could potentially lead to unauthenticated remote code execution. The post PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws appeared first on SecurityWeek .

Analysis

Tracked as CVE-2026-109618 and CVE-2026-109619, the bugs could potentially lead to unauthenticated remote code execution. The post PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws appeared first on SecurityWeek .

Indicators of Compromise (2)

CVE (2)
CVE-2026-109618
NVDMITRE CVE
CVE-2026-109619
NVDMITRE CVE
Source Attribution

Originally published by SecurityWeek on Oct 21, 2026.

Related Threats

MEDIUMVulnerabilityNEW

HHS Confirms HIPAA Penalties Will Not Be Adjusted for Inflation This Year

This week, the Department of Health and Human Services (HHS) has confirmed via the Federal Register that it will not […] The post HHS Confirms HIPAA Penalties Will Not Be Adjusted for Inflation This Year appeared first on The HIPAA Journal .

HIPAA Journal
MEDIUMVulnerabilityNEW

Signal Vulnerability Lets Malicious Callers Block Hang-Ups

Affecting the open source calling library RingRTC, the bug prevented calls from ending properly. The post Signal Vulnerability Lets Malicious Callers Block Hang-Ups appeared first on SecurityWeek .

SecurityWeek
MEDIUMVulnerability

Coinbase fined €3.25m by Irish central bank

Crypto exchange Coinbase Ireland has been penalised by the Central Bank of Ireland (CBI) for a series of operational and governance failings over a five-year period.

Finextra