PHP Releases Emergency Fixes for Critical PHP2Shell Vulnerabilities

PHP releases emergency PHP2Shell fixes for two critical flaws allowing unauthenticated code execution. Website owners and hosting providers…...

PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge

PHP has released emergency updates that fix two critical flaws in the language itself, letting an attacker without an account run code on a web server. The fixes are in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, and the PHP team says only updating fully protects a server. The flaws, together called...

php2shell-assessment-global

PHP2Shell — Defensive PHP Vulnerability Assessment Grupo Or...

php2shell-assessment-global

PHP2Shell — Defensive PHP Vulnerability Assessment Grupo Or...

php2shell-test

PHP2Shell — Evaluación no intrusiva de PHP2Shell para CVE-2026...

Exploit for CVE-2026-109618

php2shell-anatomy A defensive awareness page that dissects th...

Exploit for CVE-2026-109618

Cloudflare custom rule php2shell - UNOFFICIAL, PROVISIONAL...

Exploit for CVE-2026-109618

Overview php2shell - CVE-2026-109618 / CVE-2026-109619 ph...

Exploit for CVE-2026-109618

PHP2Shell — Security Research & Detection Research and defens...

php2shell

PHP2Shell Research & assessment tool for CVE-2026-109618...

Exploit for CVE-2026-109618

PHP2Shell — CVE-2026-109618 / CVE-2026-109619 Proof of Co...

Exploit for CVE-2026-109618

php2shell-watch A small cron-driven watchdog for PHP-FPM serv...

Exploit for CVE-2026-109618

php2shell-guard Defensive toolkit for php2shell CVE-2026...

Exploit for CVE-2026-109618

php2shell-lab A reproducible, offline lab for safely anal...

PHP 8.5.x PHP2Shell Detection

PHP versions 5.4 through 8.5.x may contain PHP2Shell remote code execution vulnerabilities. This tool performs non-exploiting HTTP checks for PHP version and session upload progress indicators. https://packetstorm.news/download/236726...

AlmaLinux 9.2 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792603232)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792603232 advisory. - PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not...

AlmaLinux 9.6 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792602059)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792602059 advisory. - PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not...

CentOS Linux 8.4 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1792599322)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1792599322 advisory. - PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not...

CentOS Linux 8.5 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1792598317)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1792598317 advisory. - PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not...