Exploit catalog

GO based scanner for PHP2SHELL(CVE-2026-109618 and CVE-2026-109619)

Source + build recipe for the php2shell (CVE-2026-109618/109619) backport to CentOS 7 / IUS PHP 7.2

PHP-Shell is a local-first, wizard-driven passive black-box assessment prototype for PHP runtime exposure to CVE-2026-109618 and CVE-2026-109619. It provides both a browser UI and a terminal wizard using the same Python engine, and exports DOCX/PDF evidence reports.

PHP CVE-2026-109618 / CVE-2026-109619 簡易確認スクリプト

Non-destructive detector for CVE-2026-109618** and **CVE-2026-109619

Public, version/fingerprint-based (non-exploitation) PHP php2shell CVE scanner (CVE-2026-109618/109619). sadrobot.

Find every PHP install on a server (distro packages, aaPanel/DirectAdmin/source builds) and fix CVE-2026-109618 / CVE-2026-109619 (php2shell) using official PHP fixes only

PHP 5.6.40 fix for CVE-2026-109618 and CVE-2026-109619 (PHP2Shell)

CVE-2026-111497: Node.js Brotli decoder OOB write — analysis, PoC, Docker lab

Detecteur CVE-2026-109618 / CVE-2026-109619 (php2shell) pour image Docker ou binaire PHP

Unofficial backport of php commit (Avoid state corruption via bailout, branch PHP-7.4-CVE-2026-109618-109619) to the final PHP 7.2 release, 7.2.34. Not reviewed by the PHP team. Use as a bridge until you are on a supported PHP.

Honeypot to attract attacks for php2shell (CVE-2026-109618 and CVE-2026-109619)

initial-access

client-side

initial-access

Signed, tested backports of EOL PHP (7.4/8.0/8.1) for CVE-2026-109618 & CVE-2026-109619 (php2shell)

Defensive self-check & response toolkit for PHP2Shell (CVE-2026-109618 / CVE-2026-109619). Version x SAPI risk check, emergency report, WAF templates. No exploit code.

Guide opérationnel, outils d’audit et procédure de remédiation pour CVE-2026-109618 et CVE-2026-109619.

Unofficial backport of the official php2shell fix (CVE-2026-109618 / CVE-2026-109619) to PHP 7.3.33. Original fix by Arnaud Le Blanc & Ilija Tovilo (php/php-src).

Отчёт: переход хостинга с PHP 5.6/7.4 на PHP 8.4 после CVE-2026-109618/109619

Bluefire Redteam detection, interim hardening, and edge filter for PHP2Shell (CVE-2026-109618, CVE-2026-109619).

Image PHP 8.3.36 (corrigee CVE-2026-109618/109619) + Apache pour PrestaShop 9 - malac.shop

Virtual patch / WAF rules for PHP2Shell (CVE-2026-109618, CVE-2026-109619)

Static, no-tracking check of a declared PHP setup against two critical advisories (CVE-2026-109618, CVE-2026-109619).

Analysis of an Apache Struts vulnerability and cybersecurity response.

a defensive security CLI that detects, assesses, and recommends remediation for CVE-2026-109618 and CVE-2026-109619

php2shell vulnerability scanner (CVE-2026-109618 / CVE-2026-109619) — detects vulnerable PHP servers even when version is hidden. No exploitation performed.

Agente de seguridad que detecta y tria php2shell (CVE-2026-109618/109619) en webs y proyectos PHP. Instalable en opencode, Claude Code, Codex, Gemini CLI y otros. Pruebas activas solo con autorización.

Unofficial PHP 5.3.29 backport of the php2shell fix (CVE-2026-109618, CVE-2026-109619) for Apache mod_php

Patched PHP 7.4 packages for Ubuntu 20.04 (focal) fixing CVE-2026-109618 / CVE-2026-109619: Ondřej Surý's 7.4.33-31 rebuilt for focal, with an installer that detects the server's PHP, upgrades it and can roll back.