curated news BleepingComputer infra

PHP2Shell security flaws now sucessfully exploited in the wild

// AI summary

PHP2Shell, containing critical RCE vulnerabilities CVE-2026-109618 and CVE-2026-109619, has been successfully exploited in the wild affecting systems running the vulnerable software.

// from the source

Two critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as PHP2Shell, have been successfully exploited in the wild. [...]