Exploit for CVE-2026-109618

PHP security fix behaviour check A small behavioural check fo...

Exploit for CVE-2026-109618

PHP Vulnerability Exposure Scanner An interactive Bash utilit...

Exploit for CVE-2026-109618

is-my-php-pwned 🔥 Did php2shell already own your servers? R...

php2shell-audit

php2shell-audit php2shell-audit is a non-destructive exposu...

Exploit for CVE-2026-109619

PHP2SHELL — Verification Lab for CVE-2026-109618 / CVE-2026-10...

Exploit for CVE-2026-109618

php2shell-scanner Non-destructive scanner with opt-in probe...

Exploit for CVE-2026-109618

CVE-2026-109618 y CVE-2026-109619 — PHP RCE: detección y mitig...

php2shell-detect-exploit-kit

php2shell — CVE-2026-109618 / CVE-2026-109619 Lab-Verified Too...

exploit-kit

php2shell — CVE-2026-109618 / CVE-2026-109619 Lab-Verified Too...

Exploit for CVE-2026-109618

php2shell-CVE-2026-109618-CVE-2026-109619-recon-exploitation-t...

Exploit for CVE-2026-109618

PHP2Shell: CVE-2026-109618 / CVE-2026-109619 PHP RCE Source Au...

Exploit for CVE-2026-109618

php2shell — CVE-2026-109618 / CVE-2026-109619 local verificati...

Exploit for CVE-2026-109618

php2shell — CVE-2026-109618 / CVE-2026-109619 Verification & D...

CVE-2026-109619 RCE via stale global state

PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on...

CVE-2026-109619 RCE via stale global state

PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on...

CVE-2026-109619

The PHP engine is vulnerable to a Use-After-Free (UAF) condition where global state may incorrectly persist or be repopulated after being freed, allowing subsequent requests to read or branch on stale memory. This flaw occurs because certain strategies can trigger a scenario where global state re...

Exploit for CVE-2026-109618

php2shell — CVE-2026-109618 / CVE-2026-109619 !CVSShttps:/...

[ASA-202610-2] php-legacy: arbitrary code execution

Arch Linux Security Advisory ASA-202610-2 ========================================= Severity: Critical Date : 2026-10-21 CVE-ID : CVE-2026-109618 CVE-2026-109619 Package : php-legacy Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-2910 Summary ======= The...