PHP2Shell: Exploitation Attempts and Remediation Trends
- Last week, we published a report describing two major vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619).
- Since then, alongside much of the security industry, the Wiz Research team has been monitoring for related activity in the wild and reviewing publicly available exploit code.
- So far, we have observed a limited number of exploitation attempts in our telemetry and have not identified a publicly available proof of concept (PoC) demonstrating complete, general end-to-end exploitation against an arbitrary target.
Unverified
- Last week, we published a report describing two major vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619).
- Since then, alongside much of the security industry, the Wiz Research team has been monitoring for related activity in the wild and reviewing publicly available exploit code.
- So far, we have observed a limited number of exploitation attempts in our telemetry and have not identified a publicly available proof of concept (PoC) demonstrating complete, general end-to-end exploitation against an arbitrary target.
Sources: Wiz