Exploit catalog

Layered AWS WAF virtual patch for the PHP2Shell RCE vulnerabilities (CVE-2026-109618 / CVE-2026-109619): Terraform, managed + custom rules, Count-to-Block rollout, detection and tests

All-in-one scanner for CVE-2026-109618 / CVE-2026-109619 (php2shell). Domain → subdomain enum → DNS resolve → passive PHP version check.

php-backport:7.4-apache PHP-7.4-CVE-2026-109618-109619

RuanSerraAzul/CVE-2026-109619-POC

PHP 7.4.33 (Windows, NTS, x64, VC15) rebuilt from the official php-src backport branch PHP-7.4-CVE-2026-109618-109619 (commit 712e60f9), which fixes CVE-2026-109618 and CVE-2026-109619.

Complete auto exploit for NGINX PHP-FPM CVE-2026-109618 / CVE-2026-109619

Rebuilds of patched ondrej/php PHP 8.1, 8.0, 7.4, 7.3 and 5.6 packages for Ubuntu 20.04 (CVE-2026-109618, CVE-2026-109619)

Fixed PHP versions and distro packages for PHP2Shell (CVE-2026-109618, CVE-2026-109619) as JSON. CC0. Data behind php2shell.fyi.

XAMPP for Windows の PHP を PHP2Shell（CVE-2026-109618 / CVE-2026-109619）修正版の PHP 8.2.35 に入れ替える非公式スクリプト

Claude Code skill: PHP2Shell (CVE-2026-109618/109619) exposure report from the Tenable Hexa AI MCP as HTML, PDF and CSV

Read-only local checker for PHP2Shell (CVE-2026-109618 / CVE-2026-109619)

Research notes, a calibrated exploit and a detection template for the PHP session upload-progress RCEs (CVE-2026-109618 / CVE-2026-109619).

Unofficial backport of php commit (Avoid state corruption via bailout, branch PHP-7.4-CVE-2026-109618-109619) to the final PHP 7.2 release, 7.2.34. Not reviewed by the PHP team. Use as a bridge until you are on a supported PHP.

Public, version/fingerprint-based (non-exploitation) PHP php2shell CVE scanner (CVE-2026-109618/109619). sadrobot.

Node.js Brotli Decoder OOB Write to RCE

Порт официального чекера PHP2Shell (CVE-2026-109618/109619) на Python 3: проверка версии PHP сайта или локального бинарника на уязвимость

AdapptOnAzure/cve-2026-111497-mitigation

PHP2Shell" (CVE-2026-109618 and CVE-2026-109619)

Unofficial Windows x64 builds of PHP 7.4.33, 8.0.30 and 8.1.34 patched for CVE-2026-109618 and CVE-2026-109619 (php2shell), for local development. / Versions Windows non officielles de PHP 7.4.33, 8.0.30 et 8.1.34 corrigées des failles CVE-2026-109618 et CVE-2026-109619, pour le développement local.

Read-only PHP2Shell audit for CVE-2026-109618 and CVE-2026-109619. Discover PHP services and prepare remediation. Linux Bash + Windows PowerShell; EN/PT HTML and CSV reports.

Sealed PHP 5.6.40+sp1 CLI builds (CVE-2026-109618/109619) for macOS and Windows

A script to help triage wordpress installs for the recent PHP Critical CVE-2026-109618 and CVE-2026-109619 vulnerabilities.. Read-only security triage and evidence collection for Plesk-hosted WordPress servers.

php2shell (CVE-2026-109618/109619) F5 BIG-IP Advanced WAF check and verification tools

PoC per php2shell CVE-2026-109618/109619 (Chain D OOM + variante senza upload) — coding by GLM uncensored

Open-source PHP security assessment tool for CVE-2026-109618 and CVE-2026-109619. Built with React, TypeScript and Cloudflare Workers.

Security advisory and PoC for CVE-2026-107079 affecting Systrome Validation & Certification 1.0.

Diagnóstico, parcheo y mitigación de PHP2Shell (CVE-2026-109618 / CVE-2026-109619) en Ubuntu

Passive PHP version checker for CVE-2026-109618 / CVE-2026-109619 (php2shell)

Detect & investigate the PHP session.upload_progress RCE (CVE-2026-109618 / CVE-2026-109619, php2shell): non-destructive remote vulnerability scanner + read-only server forensics for webshells, poisoned sessions & persistence, even after PHP was removed. Zero-dependency Python. | php2shell 漏洞检测与入侵取证工具

Sigma rules for PHP2Shell (CVE-2026-109618, CVE-2026-109619) post-exploitation