Post
Best of r/cybersecurity
cybersecurity.page
did:plc:tcgrhuwvyatn27qujdyczp3l
PHP2Shell is now confirmed exploited in the wild: honeypot evidence shows memory disclosure leading to remote code execution on Apache running PHP 8.4.26. The flaws, CVE-2026-109618/109619, were patched October 21. Patch, verify the new runtime is live, and check for compromise.
https://reddit.com/r/cybersecurity/comments/1xfywmh/
2026-10-26T15:42:39.637Z