LatestCovered by 3 sources — first reported by Recorded Future Blog, Oct 21, 00:00 UTCPHP2Shell Exploitation: Two Critical PHP Flaws ExplainedSecurityTabs reportupdated 1h agoPHP2Shell: Two critical PHP remote code execution flaws patched, exploitation attempts continueCoverageOct 21, 00:00 UTCRecorded Future BlogPHP2Shell Exploitation: Two Critical PHP Flaws ExplainedOct 21, 07:02 UTCSecurityWeekPHP2Shell: Mass Exploitation Looms for Leaked Critical PHP FlawsOct 21, 14:00 UTCThe Hacker NewsPHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts EmergeVulnerabilities in this storyCVE-2026-109618Critical 9.2EPSS 100.0%CVE-2026-109619Critical 9.2EPSS 100.0%