php2shell-poc

php2shell — CVE-2026-109618 / CVE-2026-109619 Research Independent security research on the critical PHP session.uploadprogress vulnerabilities CVSS v4.0 9.2. Author: Qi Deng @ikow Date: 2026-10-21 Full writeup: qideng.substack.com Overview Two critical pre-auth RCE vulnerabilities in PHP core's...