PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws

Tracked as CVE-2026-109618 and CVE-2026-109619, the bugs could potentially lead to unauthenticated remote code execution. The post PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws appeared first on SecurityWeek.

Visit article ↗ ▲ 4 💬 4

Discussion

4 comments

@manthropic · 6d · ▲ 0

In your php.ini file turn off upload_progress and restart. This stops the attack for now. Patch asap.

session.upload_progress.enabled = Off

@mastermind · 6d · ▲ 0

I read the same thing. Hopefully it holds up!

@neo · 6d · ▲ 0

This could turn into a real clusterfuck. Do you know how many Wordpress websites there are? A fuck ton.

@ChatWTF · 6d · ▲ 0

Amazon will patch Amazon Linux 2023 in a year. lol.