Exploit catalog

Local Docker lab + Chain A PoC for CVE-2026-109618 / CVE-2026-109619 (PHP 8.2.34)

PoC and verification material for CVE-2026-96652 (Plex Media Server timeline SSRF, owner-token disclosure chain)

local

local

Microsoft Defender Advanced Hunting queries that track PHP versions in a tenant and flag CVE-2026-109618 and CVE-2026-109619 exposure.

Unofficial PHP 5.4.45 backport for CVE-2026-109618 and CVE-2026-109619, validated with ASan, PHPT, and VC11.

PHP2Shell (CVE-2026-109618 / CVE-2026-109619) — 8-version matrix, Docker labs, and measured boundaries: what works, what does not.

initial-access

OpenSSL s_server testing tool for tiny EC private keys for CVE-2026-111943 research.

Localhost-only Docker lab reproducing PHP 2026-10 memory-safety CVEs (CVE-2026-109618/-109619) via official regression tests. Differential vulnerable-vs-fixed, no exploit code.

Free scanner for php2shell (CVE-2026-109618/109619): finds PHP installs and flags vulnerable versions, per CISA's alert.

Script para auditar las url en produccion si es vulnerable con el bug CVE-2026-109618 / CVE-2026-109619 — PHP

Detect & investigate the PHP session.upload_progress RCE (CVE-2026-109618 / CVE-2026-109619, php2shell): non-destructive remote vulnerability scanner + read-only server forensics for webshells, poisoned sessions & persistence, even after PHP was removed. Zero-dependency Python. | php2shell 漏洞检测与入侵取证工具

Static, no-tracking check of a declared PHP setup against two critical advisories (CVE-2026-109618, CVE-2026-109619).

cve explaination

Patched PHP 7.4 packages for Ubuntu 20.04 (focal) fixing CVE-2026-109618 / CVE-2026-109619: Ondřej Surý's 7.4.33-31 rebuilt for focal, with an installer that detects the server's PHP, upgrades it and can roll back.

Deploy-your-own Azure solution: Azure AI Foundry multi-agent PHP2Shell (CVE-2026-109618/109619) exposure check, inventory and remediation advice. Defensive and read-only.

CVE-2026-109618和CVE-2026-109619 检测

CVE-2026-109618 PoC for PHP 7.4.33

Virtual patch / WAF rules for PHP2Shell (CVE-2026-109618, CVE-2026-109619)

PHP2Shell Helper | A lightweight Linux security audit and remediation helper for PHP2Shell (CVE-2026-109618 and CVE-2026-109619). It locates PHP runtimes, checks versions against the first upstream security fixes, reports instances needing attention, and offers optional emergency service containment after explicit confirmation.

Sistemdeki tüm PHP kurulumlarını CVE-2026-109618/109619 açısından denetleyen Bash betiği

baron-stybd/CVE-2026-109618-CVE-2026-109619

PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE

List PHP processes and versions on Dynatrace Managed, flagging CVE-2026-109618/109619

Unofficial CVE-2026-109618 / CVE-2026-109619 source backport for Ubuntu 14.04 PHP 5.5.9, with build verification and regression evidence.

Patched PHP 8.1 Windows binaries (x64/x86, NTS/TS) fixing critical RCE CVE-2026-109618 and CVE-2026-109619. PHP 8.1 is EOL and php.net ships no Windows build of the fix. Built from the official php-src backport with php-windows-builder; SHA-256 checksums and signed build provenance.

Image PHP 8.3.36 (corrigee CVE-2026-109618/109619) + Apache pour PrestaShop 9 - malac.shop

Bluefire Redteam detection, interim hardening, and edge filter for PHP2Shell (CVE-2026-109618, CVE-2026-109619).

Отчёт: переход хостинга с PHP 5.6/7.4 на PHP 8.4 после CVE-2026-109618/109619