CVE-2026-109618: fallo crítico en PHP
RCE via OOM corruption
Publicada el · Actualizada el
100Vexday Risk Score
Corrige ahora. Ella está bajo explotación confirmada por CISA, tiene alerta oficial del gobierno de Brasil y tiene exploit funcional público.
ssvc Actcvss 9.2epss 100%
de la publicación al arma0 días
Publicada en NVD21 oct
1ª PoC18 oct
CISA KEV+5d
probabilidad de explotación
100%top 1% de las CVE
explotación observada
síCISA + VulnCheck
826 exploit(s) público(s)
Alerta oficial en Brasil
El gobierno federal de Brasil publicó una alerta, recomendación o boletín que cita esta vulnerabilidad.
- CISC Gov.br · 23 oct 2026[Atualização] Vulnerabilidades críticas de execução remota de código PHPleer en gov.br ↗
- CTIR Gov · RECOMENDAÇÃO 21/2026 · 22 oct 2026Recomendação de Segurança – PHP (CVE-2026-115560)leer en gov.br ↗
- CTIR Gov · RECOMENDAÇÃO 20/2026 · 22 oct 2026Recomendação Técnica – Diretrizes de Endurecimento (Hardening): Ocultação de Banners Tecnológicos e Versõesleer en gov.br ↗
- CISC Gov.br · 21 oct 2026Vulnerabilidades crí´ticas de execução remota de código PHPleer en gov.br ↗
- CTIR Gov · ALERTA 93/2026 · 21 oct 2026Vulnerabilidades críticas que afeta o PHPleer en gov.br ↗
Fuente: CTIR Gov (GSI) y CISC Gov.br, bajo licencia CC BY-ND 3.0.
Acción exigida por CISAplazo federal: 2026-10-29
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
En resumen
Un fallo en PHP puede corromper la memoria cuando el servidor se queda sin memoria al procesar una solicitud. Los atacantes podrían aprovecharlo para ejecutar sus propios comandos en el servidor de forma remota.
Detalle técnico
PHP usa longjmp() para salir de errores de falta de memoria (OOM), pero algunos contextos dejan la memoria de la solicitud sin inicializar antes de una asignación. La rutina de limpieza de la solicitud lee o ramifica según esa memoria, provocando corrupción; múltiples estrategias de OOM activan la condición de forma consistente. Un atacante remoto que logre llevar la aplicación al agotamiento de memoria podría lograr ejecución remota de código (CVSS 9.2, CWE-416/824/755).
Resumen generado y traducido por IA a partir de la descripción oficial.
El análisis completo de esta CVE está disponible en portugués →
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
PHP Group · PHPPoCs públicas encontradas — 826✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/52704githubgithub.com/ikow/php2shell-poc★ 1894githubgithub.com/eness/php2shell-CVE-2026-109618-CVE-2026-109619-PoC★ 1041githubgithub.com/assetnote/php2shell-scanner★ 959githubgithub.com/JoasASantos/php2shell-exploit★ 186githubgithub.com/devploit/php2shell★ 180githubgithub.com/HOSTED-POWER/php_uploadprogress_guard★ 172githubgithub.com/syrex1013/php2shell★ 148githubgithub.com/junaire/CVE-2026-109618-exploit★ 143githubgithub.com/Anton-Barinov/php2shell-patches★ 122githubgithub.com/syhunt/php2shell-protection★ 119githubgithub.com/JoasASantos/php2shell-scanner★ 109githubgithub.com/aancw/php2shell-scanner★ 99githubgithub.com/murrez/php2shell★ 92githubgithub.com/pentestershell/php2shellbt★ 75githubgithub.com/mpyw/php-eol-CVE-2026-109618-109619★ 70githubgithub.com/Qsnh/php2shell-fixed★ 61githubgithub.com/Is4yev/php2shell-poc★ 60githubgithub.com/Zer061/CVE-2026-109618★ 56githubgithub.com/vperetti/php-cve-2026-109618-109619-backports★ 56githubgithub.com/xuehuolll/php2shell-CVE-2026-109618-109619★ 50githubgithub.com/wakemeiflose/php2shell★ 47githubgithub.com/enactive-systems/CVE-2026-109618-poc★ 45githubgithub.com/godylockz/cve-2026-109618-php2shell★ 39githubgithub.com/david-alvarez-rosa/php-rce★ 38githubgithub.com/kuwoo/php2shell-Lab★ 31githubgithub.com/mikensec/php2shell-lab★ 31githubgithub.com/0x4148/CVE-2026-109618-php2shell-lab★ 27githubgithub.com/getastra/php2shell-triage★ 21githubgithub.com/GlobalsecureAcademy/php2shell-scanner-CVE-2026-109618-CVE-2026-109619★ 20githubgithub.com/0xrsydn/php2shell-scan★ 18githubgithub.com/l3tchupkt/php2shell★ 16githubgithub.com/exception0x876/php74-el7-patched★ 15githubgithub.com/MRdark-ops/php2shell★ 14githubgithub.com/Stonlifer/php2shell★ 13githubgithub.com/slabbdev/php2shell-cve-2026-109618-109619★ 13githubgithub.com/corelight/php2shell-detect★ 13githubgithub.com/Bulletdev/php2shell-poc★ 12githubgithub.com/0x1c1101/CVE-2026-109618-PoC★ 12githubgithub.com/ggsec-de/php2shell-analysis★ 10githubgithub.com/hypnguyen1209/php2shell★ 10githubgithub.com/Blue-B/php2shell-guard★ 9githubgithub.com/Bhavye-Malhotra/php2shell-2026★ 9githubgithub.com/mnk-works/php2shell-verify★ 9githubgithub.com/alvarodh5/php2shell★ 9githubgithub.com/WoYinDao/CVE-2026-109618-CVSS-9.2-Critical★ 9githubgithub.com/ericmann/php2shell-ioc★ 9githubgithub.com/cumakurt/php2shell-scan★ 8githubgithub.com/bahartanir/php2shell★ 8githubgithub.com/Nayrae/CVE-2026-109618★ 8githubgithub.com/mirrored-projects/PHP74-Windows-CVE2026★ 8githubgithub.com/Whackermelon/Php2Shell-POC★ 8githubgithub.com/PasqualePillitteri/php2shell-hardening★ 7githubgithub.com/ZeroHackOrg/php2shell-poc★ 7githubgithub.com/adityaaravind/php2shell-check★ 7githubgithub.com/ersinkoc/php-fix★ 7githubgithub.com/kamalmjt/PHP2SHELL-Patch★ 7githubgithub.com/agrresore/php2shell★ 7githubgithub.com/zr0n/php2shell★ 7githubgithub.com/mefulton/CVE-2026-109618-analysis★ 6githubgithub.com/Ademking/php2shell-migration★ 6githubgithub.com/Sol0-dev/php2shell★ 6githubgithub.com/waksboy/fixed-fpm-cve-2026-109618-and-109619-images★ 6githubgithub.com/VABISMO/php2shell-nginx-fpm-full-rce★ 6githubgithub.com/bagusindrayana/php-vuln-scan★ 6githubgithub.com/brentmartinmiller/php2shell-check★ 6githubgithub.com/Amsozzer1/php2shell-repo-audit★ 6githubgithub.com/break-the-build/php-multipart-waf-signals★ 5githubgithub.com/covertswarmlabs/PHP2Shell-Check★ 5githubgithub.com/softjapan/php74-cve-patched★ 5githubgithub.com/Continuum-AI-Corp/orcacyber-php2shell-research★ 5githubgithub.com/CyberRoute/php2shell-scanner★ 5githubgithub.com/tani2shell/php2shell-lab★ 5githubgithub.com/ginoa79/php56-php2shell-backport★ 5githubgithub.com/andreysheva/php2shell-doctor★ 4githubgithub.com/izdir/php-security-patcher★ 4githubgithub.com/MakFly/php2shell-check★ 4githubgithub.com/zhqagp/php-7.2★ 4githubgithub.com/gputier/php-rfc1867-guard★ 4githubgithub.com/viniciusbossle/php74-el7-php2shell★ 4githubgithub.com/yetDevs/php2shell-triage★ 4githubgithub.com/akamor2800/php-5.4-cve-2026-php2shell-patch★ 4githubgithub.com/CompleTech-Security/php2shell-check★ 4githubgithub.com/CompleTetech-Security/php2shell-check★ 4githubgithub.com/cseelhoff-ms/php2shell-hunting-pack★ 4githubgithub.com/Taz1920/PHP-Canarywall★ 3githubgithub.com/HackSpeak/CVE-2026-109618★ 3githubgithub.com/memuratozturk/php2shell-poc★ 3githubgithub.com/Taz1920/php-sentinel★ 3githubgithub.com/eagleofanadolu/php2shell-poc★ 3githubgithub.com/Alex-Goaga/synology-dsm6-php74-php2shell★ 3githubgithub.com/EXT-IT/php2shell-check★ 3githubgithub.com/akaihigurashi/php2scan★ 3githubgithub.com/pax-k/Php2Shell-POC★ 3githubgithub.com/Ethen1212/php2shell-CVE-2026-109618★ 3githubgithub.com/gkwelding/php2shell-ioc-check★ 3githubgithub.com/Felix3322/PHP-uniDoS★ 3githubgithub.com/TREXNEGRO/php2shell★ 3githubgithub.com/Swordsec/php2shell-guard★ 3githubgithub.com/deconstruction/EOLphp-php2shell-patches★ 3githubgithub.com/geforester/php7.4-focal-php2shell★ 3githubgithub.com/lzz0403/CVE-2026-109618-PHP2Shell-poc★ 3githubgithub.com/meuhland/php-legacy-windows-builds★ 3githubgithub.com/KtebhTeam/php2shell★ 3githubgithub.com/seppegadeyne/php2shell-runcloud-builds★ 3githubgithub.com/alham-rizvi/php2shell-scanner★ 3githubgithub.com/murat-levi/php2shell-poc★ 3githubgithub.com/kunshdeep2812/php2shell-scanner★ 3githubgithub.com/EngOREOO/php2shell-CVE-2026-109618-CVE-2026-109619-PoC★ 3githubgithub.com/open0x01/php2shell★ 3githubgithub.com/Noshadi-sec/cve-2026-109618-109619-poc★ 3githubgithub.com/Andrew2142/php73-backport★ 3githubgithub.com/revonnet/php-fix★ 3githubgithub.com/gumerzzzindo/php2shell-CVE-2026-109618-109619★ 3githubgithub.com/umair-aziz025/PHP2Shell★ 3githubgithub.com/kitten443/php2shell★ 2githubgithub.com/Poellie01/PHP2Shell-Verification-Script★ 2githubgithub.com/AmpedWasTaken/PHP2Shell-CVE-2026-109618-CVE-2026-109619★ 2githubgithub.com/RuanSerraAzul/CVE-2026-109618-POC★ 2githubgithub.com/pruiz/php-CVE-2026-109618★ 2githubgithub.com/JoasASantos/php2shell-lab★ 2githubgithub.com/alvm/php2shell-eol-backport★ 2githubgithub.com/mspiq/php2shell-scanner★ 2githubgithub.com/leonewt0n/php2shell-poc★ 2githubgithub.com/Pr0fEs0r-X/PHP2ShellX-★ 2githubgithub.com/the-berlin/bitrixvm-php-hotfix★ 2githubgithub.com/moonkit02/php2shell-poc★ 2githubgithub.com/abenezer101/php2shell★ 2githubgithub.com/frnmrls/php70-cve-2026-backport★ 2githubgithub.com/ivanscm/php80-cve-2026-109618★ 2githubgithub.com/Pr0fEs0r-X/PHP2ShellX-CVE-2026-109618-109619★ 2githubgithub.com/naravid19/php2shell-ioc★ 2githubgithub.com/Evil0ctal/php2shell-scanner★ 2githubgithub.com/pattingbabies/php2shell-CVE-2026-109618-109619★ 2githubgithub.com/codiobert/runcloud-php2shell-patch★ 2githubgithub.com/PHPatch/phpscan★ 2githubgithub.com/testerxma/php2shell★ 2githubgithub.com/BoheSama1999/php2shell-exp★ 2githubgithub.com/allureluoli/php2shell-lab★ 2githubgithub.com/josemingorance/php74-php2shell-backport-docker★ 2githubgithub.com/SamJUK/php2shell-check-cve-2026-109618★ 2githubgithub.com/cereZ23/php-up-2026★ 2githubgithub.com/rodrigocolozio/php2shell-check★ 2githubgithub.com/bashclub/php2shell-forensic-check★ 2githubgithub.com/TheFool-TAROT/php2shell-lab★ 2githubgithub.com/cyberkiddle/CVE-2026-109618★ 2githubgithub.com/WeaveHubHQ/cf-waf-bypass-check★ 2githubgithub.com/1amrahul/php2shell-cve-2026-109618-cve-2026-109619★ 2githubgithub.com/SPOTWHALE/php2shell-check★ 2githubgithub.com/psylinux/php2shell-check★ 2githubgithub.com/cm-suzuki-ryo/aws-waf-php2shell-post-guard★ 2githubgithub.com/Chrishow2/php74-apache-sury★ 2githubgithub.com/AsviS/PHP2Shell★ 2githubgithub.com/mym0us3r/PHP2Shell-Detection-with-Wazuh★ 2githubgithub.com/Galeax/PHP2Shell-Mitigations★ 2githubgithub.com/thegillion/uisp-php2shell-guard★ 2githubgithub.com/taniungou/php2shell-lab★ 2githubgithub.com/wemio/php2shell-scan★ 2githubgithub.com/CompleteTech-LLC/php2shell-check★ 2githubgithub.com/Chr1s-T/php2shell-cve-2026-109618★ 2githubgithub.com/sonuoffsec/php2shell-detector★ 2githubgithub.com/D1se0/php2shell_lab★ 2githubgithub.com/jf0x3f/php2shell-pocs★ 2githubgithub.com/Secragon/php2shell-radar★ 2githubgithub.com/stufently/php-patched-images★ 2githubgithub.com/nestorwheelock/php2shell-remediate★ 2githubgithub.com/ihsansencan/Php2Shell-Lab★ 2githubgithub.com/tal7aouy/php2shell-scanner★ 2githubgithub.com/kjry8sb/php2shell-wordpress-rce-fullchain★ 2githubgithub.com/zenzue/CVE-2026-109618_19★ 2githubgithub.com/cloudducoeur/ansible-playbook-CVE-2026-109618★ 2githubgithub.com/xbuddhi/php2shell-fix★ 2githubgithub.com/mahumadad/php2shell-analysis★ 2githubgithub.com/projetoroot/php2shell-guard★ 1githubgithub.com/cagritopuz/php2shell★ 1githubgithub.com/RemiPelloux/php-upload-rce★ 1githubgithub.com/zake1god/php2shell★ 1githubgithub.com/SanWRoot/php2shell-LAB-POC-★ 1githubgithub.com/NULL200OK/php2shell-detect★ 1githubgithub.com/san3ncrypt3d/php-oom-corruption-lab★ 1githubgithub.com/Fazmin/PHP2Shell-CVE-2026-109618-CVE-2026-109619-Mitigation-Info-PoC★ 1githubgithub.com/aledus10/PHP2Shell-Lab★ 1githubgithub.com/dustyFski/php2shell-exposure-accelerator★ 1githubgithub.com/cozybear-dev/cve-2026-109618★ 1githubgithub.com/ha1c9on/php2shell★ 1githubgithub.com/eagle1maledetto/php5.6-wheezy-cve-2026-109618★ 1githubgithub.com/slabwren/php2shell-detection★ 1githubgithub.com/ethoic-inc/php-vuln-check★ 1githubgithub.com/LHeiakim/php2shell-full-poc★ 1githubgithub.com/Faizan-Khanx/php2shell★ 1githubgithub.com/darkfibr/php2shell-detect★ 1githubgithub.com/arifulislamat/php2shell-audit★ 1githubgithub.com/gagaltotal/CVE-2026-109618-109619-php2shell★ 1githubgithub.com/msoni11/msphp2shell★ 1githubgithub.com/zerbaliy3v/php2shell-CVE-2026-109618-CVE-2026-109619-Dorks★ 1githubgithub.com/nft-syou/php-5.4.45-php2shell-patch★ 1githubgithub.com/valentin-marquez/php★ 1githubgithub.com/zarguell/php2shell-scanner★ 1githubgithub.com/KByteITServices/php-vulnerability-checker-october-2026★ 1githubgithub.com/nirzadokox/php2shell-vulnerability-check-for-CVE-2026-109618-CVE-2026-109619★ 1githubgithub.com/jsrobinson3/php74-focal-cve-2026-109618★ 1githubgithub.com/abraxas/php-oom-longjmp★ 1githubgithub.com/wind884/CVE-2026-109618-109619-PHP2Shell★ 1githubgithub.com/litobro/php2mon★ 1githubgithub.com/JohnHansonTheDev/phpreaper★ 1githubgithub.com/AdZoic/php2shell-check★ 1githubgithub.com/lankahost/lankahost-php-patch-check★ 1githubgithub.com/LeisureLinux/php2shell★ 1githubgithub.com/rjmendez/phpup-2026★ 1githubgithub.com/JackLiKa/php2shell-scan★ 1githubgithub.com/Jamsux/php2shell-check★ 1githubgithub.com/maxprog-svg/PHP2Shell-CVE-2026-109618-CVE-2026-109619★ 1githubgithub.com/hack-ita/php2shell-cve-2026-109618-109619★ 1githubgithub.com/Zeppperoni/PHP2Shell-detector★ 1githubgithub.com/prox3000/php-7.4-focal-cve-patched★ 1githubgithub.com/GetPageSpeed/php2shell-check★ 1githubgithub.com/al4n4n/php2shell★ 1githubgithub.com/JoshRob297/php2shell-research★ 1githubgithub.com/goodcoddeo/pterodactyl_PHP-CVE-2026-109618-CVE-2026-109619★ 1githubgithub.com/bladehstream/php2shell_detect★ 1githubgithub.com/niemingxing/php73-php2shell-patch★ 1githubgithub.com/it-reinbek/php2shell-auditor★ 1githubgithub.com/absholi7ly/Deep-Technical-Report-CVE-2026-109618-CVE-2026-109619-PHP2Shell★ 1githubgithub.com/iSecNG/php2shell-honeypot★ 1githubgithub.com/vaishnavucv/php2shell★ 1githubgithub.com/wasdthedebugger/php2shell★ 1githubgithub.com/AGI-CEO/php2shell-wordpress-to-nextjs-mcp★ 1githubgithub.com/Kernovix/php2shell-fix-check★ 1githubgithub.com/unbelievable-digital/is-my-php-pwned★ 1githubgithub.com/neelsomani/benevolent-php★ 1githubgithub.com/eltonlaice/php2shell-poc★ 1githubgithub.com/D4RCKCYPH3R/php2shell-scan★ 1githubgithub.com/OmerAti/php-5.6.40-CVE-2026-109618-109619.patch★ 1githubgithub.com/CCNAHLHQ/php2shell_scan★ 1githubgithub.com/fufufuwa/php2shell-detect★ 1githubgithub.com/anmolksachan/php2shell★ 1githubgithub.com/Liam-G/php2shell-audit★ 1githubgithub.com/securibee/php2shell-tenable-skill★ 1githubgithub.com/fernandotellado/php2shell-wordpress-check★ 1githubgithub.com/viralchabhadiya/php-vulnerability-checker-and-fix★ 1githubgithub.com/AbodyStudio/php2shell-shield★ 1githubgithub.com/yzw641725631-boop/windows-php7-security-backports-for-PHP2Shell★ 1githubgithub.com/scardotdev/php2shell-helper★ 1githubgithub.com/dipsh0v/php2shell-emudhra-hunting★ 1githubgithub.com/WildanDeveloper/php2shell★ 1githubgithub.com/scadastrangelove/php2shell★ 1githubgithub.com/xaviware/go-php2shell-scanner-CVE-2026-109618-CVE-2026-109619★ 1githubgithub.com/tuanhoma/CVE-2026-109618★ 1githubgithub.com/leonlai-tw/php-eol-cve-2026-109618-109619★ 1githubgithub.com/shivabalaj/CVE-2026-109618★ 1githubgithub.com/xC0D3F4TH3R/PHP2SHELL-DEFENSIVE-KIT★ 1githubgithub.com/LeminEly/CVE-2026-109618-109619★ 1githubgithub.com/D1a0y1bb/PHP2Shell-PoC★ 1githubgithub.com/appsec-cz/php-eol-patch★ 1githubgithub.com/ctkqiang/PHP2ShellPOC2026★ 1githubgithub.com/xPloits3c/PHP2Shell★ 1githubgithub.com/NELDI24git/php2shell-lab★ 1githubgithub.com/codewizdevs/php2shell-watcher★ 1githubgithub.com/matarturo/php2shell-nse-scanner★ 1githubgithub.com/arvion-ai/php-pins★ 1githubgithub.com/erdemkayar/php2shell-scan★ 1githubgithub.com/debjit604/PHP2Shell-CVE-2026-109618-CVE-2026-109619★ 1githubgithub.com/serkanburat/php74-patched-windows★ 1githubgithub.com/mostofajr7-sudo/CVE-2026-109618-CVE-2026-109619-php2shell-★ 1githubgithub.com/latadeloco/agent-php2shell★ 1githubgithub.com/smile178998/php2shell-toolkit★ 1githubgithub.com/Charlie-Netdevops/php2shell-hostcheck★ 1githubgithub.com/BenFerguson310/Cloudflare-PHP2shell-Detections★ 1githubgithub.com/mefulton/CVE-2026-109618-php56-public★ 1githubgithub.com/Agentic-DFIR/PHP2Shell★ 1githubgithub.com/Opathedane/php2shell★ 1githubgithub.com/toxy4ny/php2shell-checker★ 1githubgithub.com/kishwordulal2005/CVE-2026-109618-and-CVE-2026-109619-Exploit★ 1githubgithub.com/logesh-GIT001/php2shell★ 1githubgithub.com/RemiPelloux/php-session-upload-progress-uaf★ 1githubgithub.com/nesirat/php2shell-guard★ 1githubgithub.com/checkfoxe/php56-session-uaf-patch★ 1githubgithub.com/kaaangumus/php2shell-kit★ 1githubgithub.com/egctl/php2shell★ 1githubgithub.com/sajjadh47/php2shell-php★ 1githubgithub.com/ZiarenEASM/php2shell-probe★ 1githubgithub.com/Nguemoue/project2026_20261024_php2shellcheck★ 1githubgithub.com/namest504/PHP2Shell-Poc★ 1githubgithub.com/exch0-wuz-h3r3/php2shell-response-inspector★ 1githubgithub.com/SirjanSingh/php2shell-check★ 1githubgithub.com/ravhirizaldi/php2shell-engine-rce★ 1githubgithub.com/AIjennings/ariawave-php2shell-scanner★ 1githubgithub.com/aduli198/CVE-2026-109618_CVE-2026-109619★ 1githubgithub.com/devzyai/CVE-2026-109618-POC★ 1githubgithub.com/delvin-45/php2shell-CVE-2026-109618-CVE-2026-109619-PoC★ 1githubgithub.com/darkLabz001/php2shell-audit★ 1githubgithub.com/TahuCryptsi/php2shell-check★ 1githubgithub.com/tranlammankg/php2shell-scanner★ 1githubgithub.com/Lexsah/php2shell-detection★ 1githubgithub.com/zNexoraTech/php2shell-detector★ 1githubgithub.com/kipmyk/PHP2Shell★ 1githubgithub.com/guaidao2/php2shell-exploit-labstyle★ 1githubgithub.com/orbitron-ai/php2shell-response-kit★ 1githubgithub.com/Sanal-Lince/PHP-Shell-v0.3★ 1githubgithub.com/franckferman/CVE-2026-109618★ 1githubgithub.com/rootone-it/nginx-php2shell-monitor★ 1githubgithub.com/ecomyseo/ecom_blockrceflaws★ 1githubgithub.com/emirwtz/php2shell-audit★ 1githubgithub.com/julio-romo-muninn/PHP2SHELL★ 1githubgithub.com/silastammerik/php2shell-mitigacao★ 1githubgithub.com/Daniel-wambua/php2shell-poc★ 1githubgithub.com/SoftCreatR/php81-php2shell-fix★ 1githubgithub.com/php2-shell/php2shell-POC-CVE-2026-109618-CVE-2026-109619★ 1githubgithub.com/Stensel8/check-for-CVE-2026-109618-CVE-2026-109619★ 1githubgithub.com/shivrajem/php2shell-detect★ 1githubgithub.com/imranulbari/php-security-update-helper★ 1githubgithub.com/EthicalHCOP/php2shell-Simple-Checker★ 1githubgithub.com/thetowsif/php2shell-scan-patch★ 1githubgithub.com/hoed/php2shell★ 1githubgithub.com/hiramcoop/php2shellscan★ 1githubgithub.com/MomoRizza/php2shell★ 1githubgithub.com/euriconicacio/php2shell-validation-toolkit★ 1githubgithub.com/suleymanpetek/shadowphp★ 0githubgithub.com/llrrzz-111/php2shell-guard★ 0githubgithub.com/larsactionhero/php-patch-check★ 0githubgithub.com/ruban-s/php-8.1-windows-security★ 0githubgithub.com/Stonlifer/php2shell-old2★ 0githubgithub.com/basesixtythree/B63-POC-CVE-2026-109618★ 0githubgithub.com/hanyuanchen08-netizen/php-exposure-audit★ 0githubgithub.com/Trupal25/php2shell-audit★ 0githubgithub.com/flexEST/php2shell_checker★ 0githubgithub.com/manuxio/untested-php2shell-fixed-php-5-4-apache★ 0githubgithub.com/manuxio/untested-php2shell-fixed-php-7-2-apache★ 0githubgithub.com/yanzyuyu/php2shell-prtct★ 0githubgithub.com/itzen300/php2shell_RCE★ 0githubgithub.com/spcaeo/php2shell-check★ 0githubgithub.com/swap18plus/php2shell_CVE-2026-109618-and-CVE-2026-109619★ 0githubgithub.com/alvleont/php-patch-claude-skill★ 0githubgithub.com/bsalunke/php2shell-lab★ 0githubgithub.com/emirwtz/php2shell★ 0githubgithub.com/mc493/php2shell-enterprise-hardening-cve-2026-109618-109619★ 0githubgithub.com/CODEMaster-284/php2shell-audit★ 0githubgithub.com/ahallais/php71-debian9-backport★ 0githubgithub.com/gukHyeonGeum/cve-2026-109618-109619-el7★ 0githubgithub.com/pro-m16/CVE-2026-109618-php2shell-lab★ 0githubgithub.com/earlkun-ngga/ipeh★ 0githubgithub.com/sqzer-x/php2shell-scanner★ 0githubgithub.com/Senturkselim/Am-I-Infected★ 0githubgithub.com/flawme/php2shell-scanner★ 0githubgithub.com/Suleman-Elahi/php2shell-sentinel★ 0githubgithub.com/sajadonline/patch-php2shell★ 0githubgithub.com/skydwn/CVE-2026-109618★ 0githubgithub.com/reza-ghanbari-adivi/php2shell-scanner★ 0githubgithub.com/sstrobl-osm/php2shell-tools★ 0githubgithub.com/wunamesst/php-cve-2026-109618-109619-patch★ 0githubgithub.com/phpfixes/phpfixes-php2shell★ 0githubgithub.com/K4ySuh/php-oneshot-checker★ 0githubgithub.com/devborlot/php2shell-fix★ 0githubgithub.com/googlesky/GHSA-w8hw-w9fx-j79w★ 0githubgithub.com/Cyber-BansalAI/php2shell-2026★ 0githubgithub.com/gasanthosh/php2shell★ 0githubgithub.com/StiJans/php7.4-cve-109618-109619-fix★ 0githubgithub.com/avego/php2shell★ 0githubgithub.com/jeffschafer/Bigfix-PHP-Vulnerability-Scanner-Content-CVE-2026-109618-CVE-2026-109619★ 0githubgithub.com/Leviticus-Triage/php2shell-unchained★ 0githubgithub.com/semihyesilyurt/CVE-2026-109618-PoC★ 0githubgithub.com/grergea/php81-el7-php2shell★ 0githubgithub.com/ahallais/php82-ubuntu2404-backport★ 0githubgithub.com/Bccccc/php2shell-check★ 0githubgithub.com/Darabium/php2shell-POC★ 0githubgithub.com/Abdullah-Mehtab/php2shell-lab★ 0githubgithub.com/Frankie7techy/php2shell-lab★ 0githubgithub.com/fixnhanh-linux/update-php-cve★ 0githubgithub.com/yunuscobas/php-inventory-scanner★ 0githubgithub.com/gorgeoushos/CVE-2026-109618-research★ 0githubgithub.com/roloVibes/php2shell★ 0githubgithub.com/ucrm-plugins/php2shell★ 0githubgithub.com/vietvq/php-backport-7.4-apache★ 0githubgithub.com/dguerri/php2leak★ 0githubgithub.com/LeonelArrua/CVE-2026-109618_CVE-2026-109619_Mitigate★ 0githubgithub.com/rattones/php2shell-check★ 0githubgithub.com/FranklinF25/php2shell★ 0githubgithub.com/Quaerendir/php2shell-audit★ 0githubgithub.com/nukIeer/CVE-2026-109618-109619-checker★ 0githubgithub.com/nanoarmando/php-focal-backports★ 0githubgithub.com/zxzx1290/php7.4-fix★ 0githubgithub.com/bee7813993/xampp-security-update★ 0githubgithub.com/dc-holdings-spa/php2shell-lab★ 0githubgithub.com/yanzyuyu/phptshell★ 0githubgithub.com/LightSpeedC/20261022-research-php-cve★ 0githubgithub.com/0k1dok1/CVE-2026-109618-CHECK★ 0githubgithub.com/alanh0vx/php2shell-check★ 0githubgithub.com/0-draft/php2shell-anatomy★ 0githubgithub.com/k0x-offsec/php2shell-shield★ 0githubgithub.com/grupooruss/php2shell-test★ 0githubgithub.com/WeMakeGood/php2shell★ 0githubgithub.com/zhaoboy9692/CVE-2026-109618★ 0githubgithub.com/plob881/php2shell-shield★ 0githubgithub.com/dogussekerci/php-upload-progress-mitigation★ 0githubgithub.com/charindithjaindu/CVE-2026-109618★ 0githubgithub.com/adriyansyah-mf/CVE-2026-109618-109619-PHP-session.upload_progress-Exploit-★ 0githubgithub.com/Incerto-inc/php-vuln-check-2026-10★ 0githubgithub.com/fmdiscioglu/php-cve-2026-109618-checker★ 0githubgithub.com/BrenesRM/The-Kodiak-Shield-CD-Cyber-Range-Masterclass-en-PHP2Shell★ 0githubgithub.com/danrod96-new/php-patch-check★ 0githubgithub.com/antiburen/PHP2Shell-Probe★ 0githubgithub.com/nsrivastava2velsof/php56-php2shell-patch★ 0githubgithub.com/johanych/php2shell-checker★ 0githubgithub.com/0xgitpushpray/php2shell★ 0githubgithub.com/genetix/php2shell-diagnostic★ 0githubgithub.com/radito/php74-backport★ 0githubgithub.com/dhloyola/php2shell-fix-php7★ 0githubgithub.com/meowmeow34spec/php2shell-namu-kr★ 0githubgithub.com/lushinshang/php2shell-cve-2026-109618★ 0githubgithub.com/zdeneksvarc/wordpress-7.1.3-patched-php2shell★ 0githubgithub.com/Kindredman/php2shell-host-audit★ 0githubgithub.com/joshuarosato/php2shell-poc★ 0githubgithub.com/skwirrel/php-cve-2026-109618-check★ 0githubgithub.com/nukIeer/php2shell-checker★ 0githubgithub.com/atarus-security/atarus-phpcheck★ 0githubgithub.com/the-metafactory/php-patch-verify★ 0githubgithub.com/mengchencloud/aws-php2shell-mitigation★ 0githubgithub.com/4B3R4M4-607D/php2shell★ 0githubgithub.com/htobty/php2shell-check★ 0githubgithub.com/tiendungdev/php2shell-mitigation★ 0githubgithub.com/segfo/php2shell-poc★ 0githubgithub.com/ansonhsu-ai/php2shell-cve-2026-109618-ste★ 0githubgithub.com/UrsusMagus/php74-windows-security-build★ 0githubgithub.com/yu1row/php-cve-2026-check★ 0githubgithub.com/mohamedation/php2shell-scanner★ 0githubgithub.com/MKA930/php2shell-remediation-guide★ 0githubgithub.com/ryantseng24/php2shell-f5-waf-tools★ 0githubgithub.com/jzgyhlove/php2shell-windows★ 0githubgithub.com/juliosuas/php2shell-check★ 0githubgithub.com/mekhalleh/php2shell-advisory★ 0githubgithub.com/securin-public/php2shell-checker★ 0githubgithub.com/acronet-fr/windows-security-builds-for-php★ 0githubgithub.com/Py0x11/php2shell-detection★ 0githubgithub.com/r0x43g/php2shell-vendor-watch★ 0githubgithub.com/netbadgersltd/php72u-build★ 0githubgithub.com/imhyunho99/php2shell-shield★ 0githubgithub.com/jaba0x/php2shell-guard★ 0githubgithub.com/coldcain-sec/php2shell-checker★ 0githubgithub.com/louzaonet/php2shell_hunt_ispconfig★ 0githubgithub.com/fletto2/php56-php2shell-patches★ 0githubgithub.com/waksboy/php-cve-2026-109618-109619-tester★ 0githubgithub.com/amahjoshdevsec/php2shell-shield★ 0githubgithub.com/dinvisible1/nmap-php2shell★ 0githubgithub.com/danieljamesbertrand/php2shell-source-hotfix★ 0githubgithub.com/neoqmin/php2shell★ 0githubgithub.com/nurlanchip/PHP2SHELL-POC-Lab-CVE-2026-109618-CVE-2026-109619★ 0githubgithub.com/isaca0315/cve-2026-109618-109619-session-upload-progress-trigger★ 0githubgithub.com/axon003/php-legacy-cve-2026-109618★ 0githubgithub.com/MorphingYU/CVE-2026-109618★ 0githubgithub.com/SirjanSingh/shiny-php★ 0githubgithub.com/scriptzteam/Paranoid-PHP2Shell★ 0githubgithub.com/colinyy/php2shell-exposure-check★ 0githubgithub.com/Julien-TrentAI/php2shell-trent-fixture★ 0githubgithub.com/ncbtn/CVE-2026-PHP-Fix★ 0githubgithub.com/h3r2ym/Check-PHP-Docker-CVE-2026-109618---109619★ 0githubgithub.com/turovskiy/php2shell-fixer★ 0githubgithub.com/lynolz163/php2shell-research-public★ 0githubgithub.com/piecar21/CVE-2026-109618★ 0githubgithub.com/cyrilshaji38/php2shell_offsec★ 0githubgithub.com/foxcornlab/php2shell-scanner★ 0githubgithub.com/Mojo7823/phpscan★ 0githubgithub.com/zinspin888/crypto_quinxin★ 0githubgithub.com/r0yfire/php2shell★ 0githubgithub.com/lflare/php2shell-cve-2026-109618★ 0githubgithub.com/Liquescent-Development/CVE-2026-109618-CVE-2026-109619★ 0githubgithub.com/axisops/CVE-2026-109618-109619★ 0githubgithub.com/roblennon/php-scare-counted★ 0githubgithub.com/bianqiang-ui/phpscan-go★ 0githubgithub.com/tommaru66-pixel/php2shell-poc-1★ 0githubgithub.com/maikbehring/php-notbetrieb★ 0githubgithub.com/gregoirer-mediactive/php★ 0githubgithub.com/definitiveref/php2shell-CVE-2026-109618-109619-Research★ 0githubgithub.com/paulamckenzie9193/php2shell-check★ 0githubgithub.com/manuxio/untested-php2shell-fixed-php-fpm-mod_php★ 0githubgithub.com/dhloyola/php2shell-fix-74★ 0githubgithub.com/nwfella/php2shell-advisory★ 0githubgithub.com/yashasrnair/php2shell★ 0githubgithub.com/rpersak/php2shell_check★ 0githubgithub.com/FacundoGimenez/php2shell-mitigation★ 0githubgithub.com/edgarbaldemarmx/php2shell-remediation★ 0githubgithub.com/Autive/php2shell-watch★ 0githubgithub.com/daffa001/php-CVE-2026-109618-CVE-2026-109619★ 0githubgithub.com/kaaangumus/php2shell-nuclei★ 0githubgithub.com/nocerainfosec/php2shell-checker★ 0githubgithub.com/Kyros0324/CVE2026★ 0githubgithub.com/WeszNL/directadmin-php2shell-ansible-mitigation★ 0githubgithub.com/shadowofleaf96/php2shell-php7-mitigation-kit★ 0githubgithub.com/tumibroikakou/php_sec_patch★ 0githubgithub.com/ProTekk/php2shell-detect★ 0githubgithub.com/want3d04/woxeshell★ 0githubgithub.com/BigHackerManXD/php-upload-progress-hardening-wp★ 0githubgithub.com/EkaterinaMarchetti/Non-intrusive-PHP2Shell-assessment-for-CVE-2026-109618-and-CVE-2026-109619★ 0githubgithub.com/nsrg-fmlorg/php-cve-2026-109618★ 0githubgithub.com/grupooruss/php2shell-assessment-global★ 0githubgithub.com/SANAULLAH-AI/php2shell-safe-learning-lab★ 0githubgithub.com/mothproof3512/php2shell-scan★ 0githubgithub.com/EkaterinaMarchetti/php2shell-assessment-global★ 0githubgithub.com/1o-ya/php-cve-2026-109618-hotfix-guide★ 0githubgithub.com/rdwr-namikb/php2shell-cve-2026-109618-109619-lab★ 0githubgithub.com/AvaterXXX/CVE-2026-109618-CVE-2026-109619-★ 0githubgithub.com/luivc1/php-vuln-responder★ 0githubgithub.com/denizkoekden/php56-el-backports★ 0githubgithub.com/kiran-ox/php2shell-check★ 0githubgithub.com/kernelkill/PoC_f5_php2shell.sh★ 0githubgithub.com/vulnace/PHP2Shell★ 0githubgithub.com/x0xr00t/sl0ppy-php2shellscan★ 0githubgithub.com/atrailab/php-security-update-helper★ 0githubgithub.com/derazo1/php2shell-scanner★ 0githubgithub.com/Flookerton/Am-I-Pwned★ 0githubgithub.com/ultravistor/int★ 0githubgithub.com/scriptsnet/php2shell-security-toolkit★ 0githubgithub.com/AlexVargasV/php2shell-response-kit★ 0githubgithub.com/benjagdg/php2shell-ubuntu-fix★ 0githubgithub.com/mbelsis/php2shell_scan★ 0githubgithub.com/sprabhav7/php2shell-detection★ 0githubgithub.com/Anwar0904/php2shell-guard★ 0githubgithub.com/dos-security/php-critical-rce-advisory★ 0githubgithub.com/chamrouensqa/php2shell-cve-poc★ 0githubgithub.com/fardinbarashi/PHP-CVE-2026-109618-and-CVE-2026-109619★ 0githubgithub.com/cred0core/Sigma-rule-CVE-2026-109618★ 0githubgithub.com/SmR492/php-7.2-CVE-2026-109618-109619★ 0githubgithub.com/5WARM-AI/php2shell-check★ 0githubgithub.com/goodBoysss/php70-security-backport★ 0githubgithub.com/tobiastillstam/Scan-PHP2Shell★ 0githubgithub.com/vitalelele/CVE-2026-109618-PoC★ 0githubgithub.com/bagsiz/el7-php74-security★ 0githubgithub.com/Marciano-Morinigo/php2shell-CVE-2026-109618-CVE-2026-109619-PoC-Lab★ 0githubgithub.com/yehezkiel1086/php2shell-check★ 0githubgithub.com/waqas578/Plymouth-Retail-Ltd.---PHP2Shell-Vulnerability-Incident-Remediation-Report★ 0githubgithub.com/jeffreyesdavid/php-guardian★ 0githubgithub.com/aplite-de/php2shell-detection-rules★ 0githubgithub.com/rajasekharponakala/php2shell-brief★ 0githubgithub.com/tuwiliyt/cve-2026-109618★ 0githubgithub.com/seguridadentrerios/CVE-2026-109618-CVE-2026-109619★ 0githubgithub.com/hyderoo/php2shell-check★ 0githubgithub.com/Shadow-Pixxxel/php-advanced-hunting★ 0githubgithub.com/BartoszGarba/php2shell-sigma-rules★ 0githubgithub.com/wromansky/php2shell-warn★ 0githubgithub.com/JackReaper1020/php_oom★ 0githubgithub.com/somisec/php2shell-scanner★ 0githubgithub.com/SoroushAlamdari/php2shell-detect★ 0githubgithub.com/rahnas/php2shell-autofix★ 0githubgithub.com/meta-l/WordPress-PHPVuln-Triage★ 0githubgithub.com/bitforce23-max/PHP2Shell★ 0githubgithub.com/ali-security/php-5.6.40-sp1-build★ 0githubgithub.com/hezhidong/php2shell-guard★ 0githubgithub.com/techtaek77/php2shell-guide★ 0githubgithub.com/raeseoklee/php-safepatch★ 0githubgithub.com/463861437/guard-for-php74★ 0githubgithub.com/leejongyoung/php2shell-kr★ 0githubgithub.com/alefkaue/php2shell-security-assessor★ 0githubgithub.com/bagsiz/el8-php73-security★ 0githubgithub.com/ZeroHunt-org/self-check★ 0githubgithub.com/imsarah/php2shell-hardening-for-agents★ 0githubgithub.com/DandanLLab/PHP-5.6.40-CVE-2026-109618-109619★ 0githubgithub.com/PapaBill1234/php2shell-toolkit★ 0githubgithub.com/Ls-ComCSIRT/php2shell-scan★ 0githubgithub.com/Ghost-Bx1/php-exploits-CVE-2026-109618-CVE-2026-109619-CVE-2024-4577★ 0githubgithub.com/aiuser888-bot/php-7.3.33-cve-2026-109618-109619★ 0githubgithub.com/amier-ge/php2shell★ 0githubgithub.com/walt3rblake/php2shell-scanner★ 0githubgithub.com/jniedergang/php74-el7-php2shell★ 0githubgithub.com/RuxaXa/php2shell-sapi-differential★ 0githubgithub.com/ionsec/php2shell-detector★ 0githubgithub.com/segfaultx01/php2shell-pocJavali★ 0githubgithub.com/Nguemoue/project2026_20261023_php_rce_guard★ 0githubgithub.com/jensb1/php-8.2.34-session-uaf-rce★ 0githubgithub.com/pagvac/php2shell-trends★ 0githubgithub.com/GarphenGate/php2shell-defender-toolkit★ 0githubgithub.com/saaudsdk/php2shell-cve-2026-109618-109619-fix★ 0githubgithub.com/ytbsamsu007/CVE-2026-109618-109619-Docker-Lab-Tutorial★ 0githubgithub.com/intelliroot-tech/php2shell★ 0githubgithub.com/DARKSTUFF-LAB/php2shell-poc★ 0githubgithub.com/vintage-alt/CVE-2026-109618-and-CVE-2026-109619-php2shell-burpproxy★ 0githubgithub.com/bagsiz/el7-php71-security★ 0githubgithub.com/CypherSecurity/php2shell-detection★ 0githubgithub.com/87sunitasingh-droid/RHYTHM-SINGH★ 0githubgithub.com/imaginal/docker-php74-trixie★ 0githubgithub.com/nikhilyadav551/php2shel★ 0githubgithub.com/utkarsssh17/cve-2026-109618-php2shell-poc★ 0githubgithub.com/bogdik/php2shell-el7-el8-rpm-fixed★ 0githubgithub.com/Rahat463/patchferry-check★ 0githubgithub.com/E-Sherlock/php2shell-detection-engineering-lab★ 0githubgithub.com/StiJans/php8-cve-109618-109619-fix★ 0githubgithub.com/hirokidaichi/php56-cve-2026-backport-experiment★ 0githubgithub.com/adamtamenne/php2shell-lab★ 0githubgithub.com/tmespro/php-emergency-mitigations★ 0githubgithub.com/bagsiz/el7-php70-security★ 0githubgithub.com/JVCSampaio/php2shell-hardening★ 0githubgithub.com/solymx/php-cve-2026-research★ 0githubgithub.com/HORKimhab/CVE-2026-109618-619★ 0githubgithub.com/inetzombie/php2shell-check★ 0githubgithub.com/hkoeck/php2shell-status★ 0githubgithub.com/mbadis-dev/php-cve-2026-109618-toolkit★ 0githubgithub.com/bagsiz/focal-php74-security★ 0githubgithub.com/jejex0/php2shell-scanner★ 0githubgithub.com/rmnelson/php-5.3.29-cve-2026-109618-109619★ 0githubgithub.com/CVEChecker26/dyd★ 0githubgithub.com/hugo8xx/php2shell-waf★ 0githubgithub.com/alibanhakeia2018/malac-php-image★ 0githubgithub.com/Bluefire-Redteam-Cybersecurity/bluefire-php2shell-guard★ 0githubgithub.com/KadkinRoman/php84-migration-report★ 0githubgithub.com/kamibutt143/php-7.3-php2shell-backport★ 0githubgithub.com/Arwy07/php2shell-remediation-guide★ 0githubgithub.com/anthonyhann/php-crisis-toolkit★ 0githubgithub.com/emphereio/php-eol-backports★ 0githubgithub.com/mrmtwoj/php-cve-2026-109618-fixer★ 0githubgithub.com/baron-stybd/CVE-2026-109618-CVE-2026-109619★ 0githubgithub.com/moorwald/mautic4-legacy★ 0githubgithub.com/manshoor/php2shell-scanner★ 0githubgithub.com/4itec/php-7.4.3.3-patch★ 0githubgithub.com/RobertoCifre/php2shell-check★ 0githubgithub.com/louzaonet/php2shell_hunt★ 0githubgithub.com/Certbn/PHP2Shell-CVE-2026-109618-CVE-2026-109619-★ 0githubgithub.com/dexteon/php2shell-poc★ 0githubgithub.com/DilanWW/php-cve-check★ 0githubgithub.com/xjodoin/legacy-runtime-security-backport★ 0githubgithub.com/laurentlevi/dt-managed-php-versions★ 0githubgithub.com/errorfo/php2shell★ 0githubgithub.com/newtro/php2shell-site-check★ 0githubgithub.com/mehmetkuruyuz/php-cve-audit★ 0githubgithub.com/manuxio/untested-php2shell-fixed-php-7-2-fpm★ 0githubgithub.com/Galeax/php2shell-scanner★ 0githubgithub.com/Officerwasu/php2shell★ 0githubgithub.com/webninjjacoder/security-backports-for-php74★ 0githubgithub.com/EtherHamRadio/asl-node-check★ 0githubgithub.com/ChangWeiHong/php-cve-local-lab★ 0githubgithub.com/PouriaMeshgini/php2shell★ 0githubgithub.com/Magicalname/php2shell-guard★ 0githubgithub.com/SideeID/php2shell★ 0githubgithub.com/renyang-create/php2shell-repro★ 0githubgithub.com/joec4i/docker-library-php★ 0githubgithub.com/ryuhaneul/php-el7-cve-2026-109618★ 0githubgithub.com/joei007/PHP-5.6.40-Patched★ 0githubgithub.com/fschell/tools★ 0githubgithub.com/tsepangnkoe/php2shell-audit★ 0githubgithub.com/9hb/php2shell-poc★ 0githubgithub.com/kowalski-analysis/php2shell-checker★ 0githubgithub.com/digital-heroes-hamburg/wp-php2shell-check★ 0githubgithub.com/spade-kk/php2shell-exploit★ 0githubgithub.com/CyberSunil/cybersunil.github.io★ 0githubgithub.com/ChaskarVinit/cve-2026-109618-php-oom-simulation★ 0githubgithub.com/AmanSin001/php2shell-check★ 0githubgithub.com/pagvac/php2shell-detect★ 0githubgithub.com/sanketkokate712/php2shell-fix★ 0githubgithub.com/Filipegabri/RodMapAuditoriaweb★ 0githubgithub.com/pruthvi0820-cell/phpguard★ 0githubgithub.com/manteiga-foundation/php2shell-labs★ 0githubgithub.com/CyberRick-AI/php2shell-check★ 0githubgithub.com/h1-wh0areu/PHP-CVE-Scanner★ 0githubgithub.com/abelncm/php2shell-claude-code-prompt★ 0githubgithub.com/zhuyihenzheng/php2shell-repro★ 0githubgithub.com/Suman99pro/php2shell-check★ 0githubgithub.com/umer-r/php2shell-scan-revamp★ 0githubgithub.com/citypeople/php2shell★ 0githubgithub.com/AbacusNin/php-radar★ 0githubgithub.com/GOLF2546/PHP2Shell-CVE-2026-109618-CVE-2026-109619★ 0githubgithub.com/marcotorres/php2shell-demo★ 0githubgithub.com/StiJans/php8.1-cve-109618-109619-fix★ 0githubgithub.com/mamarce/php-vulns-discovered-23-10-2026★ 0githubgithub.com/catscarlet/php-fpm-docker-PHP-7.4-CVE-2026-109618-109619-free★ 0githubgithub.com/andreysheva/homebrew-php2shell-doctor★ 0githubgithub.com/fbuff-tools/php2shell-checker★ 0githubgithub.com/daothinh/php2shell-monitor-rz★ 0githubgithub.com/MrPrinceRawat/php2shell-behind-nginx★ 0githubgithub.com/lucasbarros097/PHP2Shell__CVE-2026-109618__CVE2026-109619★ 0githubgithub.com/haobachang-1/php2shell-CVE-2026-109618-CVE-2026-109619★ 0githubgithub.com/squiblyza/CVE-2026-109618-CVE-2026-109619★ 0githubgithub.com/puffert/php-critical-rce-scanner★ 0githubgithub.com/syrex1013/CVE-2026-109618★ 0githubgithub.com/sdminev/php2shell-poc★ 0githubgithub.com/r3c0nd4t4/php2shell-verify★ 0githubgithub.com/cj667113/OCI-Ansible-Fix-CVE-2026-109618_CVE-2026-109619★ 0githubgithub.com/guoziyu415/php2shell-check★ 0githubgithub.com/mejustbox-byte/CVE-2026-109618-CVE-2026-109619★ 0githubgithub.com/toopster-com/php2shell-check-for-claude★ 0githubgithub.com/The-DevOps-Daily/php2shell-check★ 0githubgithub.com/1Nightlovel/CVE-2026-109618★ 0githubgithub.com/xqus/php2shell-check★ 0githubgithub.com/hellbound2307/php2shell-lab★ 0githubgithub.com/fparch/php-cve-lab★ 0githubgithub.com/codesource/cve-check★ 0githubgithub.com/hoehyeonlab/php-cve-2026-109618-check★ 0githubgithub.com/jorgbot/PHP2Shell★ 0githubgithub.com/sawula7/php72-php2shell-backport★ 0githubgithub.com/g41277460-cpu/CVE-2026-109618-CVE-2026-109619-php2shell-★ 0githubgithub.com/EfraimDiveroli-Pwn3d/PHP2shell_nuclei_templates★ 0githubgithub.com/manuxio/untested-php2shell-fixed-php-5-4-fpm★ 0githubgithub.com/anldori/CVE-2026-109618★ 0githubgithub.com/ThePainter1939/php2shell-guard★ 0githubgithub.com/Pratikchandrathakur/CVE-2026-109618-109619-checker★ 0githubgithub.com/KanyCrew/php2shell-poc★ 0githubgithub.com/ITlusions/ITL.PHP2Shell.Hardening★ 0githubgithub.com/JumpsecLabs/phpocalypse★ 0githubgithub.com/Unkn0vv/php2shell★ 0githubgithub.com/SeanDishman/php2shell-CVE-2026-109618-CVE-2026-109619★ 0githubgithub.com/zhaoboy9692/CVE-2026-109618_★ 0githubgithub.com/0ldbaby/php2shell★ 0githubgithub.com/sxyrxyy/php2shell-cve-2026-109618-check★ 0githubgithub.com/BIBILZERODAY/PHP2Shell-CVE-2026-109618-CVE-2026-109619-Mass-Exploit★ 0githubgithub.com/sorenjohanson/crowdsec-cve-2026-109618-rule★ 0githubgithub.com/chrisdfir/php2shell-detection★ 0githubgithub.com/pete-builds/php-security-release-2026-10★ 0githubgithub.com/Huboxt/php-base-images★ 0githubgithub.com/alvaroguzmancode/CVE-2026-109618★ 0githubgithub.com/ronoski/php2shell-detect★ 0githubgithub.com/violensoul/php2shell-sigma★ 0githubgithub.com/NaNoBotCo/php-patch★ 0githubgithub.com/m16a4666/php2shell-fix★ 0githubgithub.com/TheMursalin/CVE-2026-109618★ 0githubgithub.com/runasy-koonta/php2shell-7.4.33-poc★ 0githubgithub.com/gei-git/php2shell-poc★ 0githubgithub.com/SmR492/php-7.3-CVE-2026-109618-109619★ 0githubgithub.com/krisztianhari-wq/php2shell-scan★ 0githubgithub.com/ChlodAlejandro/php8.5-armv6l-binaries★ 0githubgithub.com/defendable/PHP2Shell★ 0githubgithub.com/0xBlackash/CVE-2026-109618★ 0githubgithub.com/CarrollUniversityCS/patch-watch★ 0githubgithub.com/jarohull-ai/jfp-edge-radar★ 0githubgithub.com/karlisl/php2shell-rules★ 0githubgithub.com/farimazhar/php2shell-fix-toolkit★ 0githubgithub.com/lesterlam/php2shell-lab★ 0githubgithub.com/whxylm/tdoa-php-cve-2026-109618-109619-patch-package★ 0githubgithub.com/jlrodriguezdev/laravel-bot-protection★ 0githubgithub.com/onexxu/php2shell-poc★ 0githubgithub.com/malikad778/php2shell-guard★ 0githubgithub.com/fksegundo/php2shell-lab★ 0githubgithub.com/ngenieer/php-eol-backports★ 0githubgithub.com/nokitakaze/CVE-2026-109618-109619-checker★ 0githubgithub.com/liuhahi/test-php★ 0githubgithub.com/Nostraxiten/PHP2shell★ 0githubgithub.com/yildirimserkan/php2shellscanner-web★ 0githubgithub.com/kjry8sb/php2shell-mitigation★ 0githubgithub.com/troey11/php54-php2shell-backport★ 0githubgithub.com/RooQs/php74-alpine★ 0githubgithub.com/rayaar/php2shellPoc★ 0githubgithub.com/lanz/php2shell-coverage-check★ 0githubgithub.com/naoki51931/PHP2Shell-Research-Lab-v0.1★ 0githubgithub.com/qw3rtyou/php2shell★ 0githubgithub.com/HARSHA2396/php2shell-exposure-scanner★ 0githubgithub.com/muhammadsohaimmuqtada/php2shell-version-frontier★ 0githubgithub.com/FoxKyong/php2shell-checks★ 0githubgithub.com/swguan325/php80-scl-el7-rebuild★ 0githubgithub.com/0xgh057r3c0n/PHP2shell★ 0githubgithub.com/c04tl/PHP2SHELL-Lab★ 0githubgithub.com/foxcornlab/php-worker-pin★ 0githubgithub.com/RH1TE/php2shell-fixed-images★ 0githubgithub.com/inderpreetsinghips/php2shell-audit★ 0githubgithub.com/IamLucif3r/CVE-2026-109618-exploit★ 0githubgithub.com/nfemenia/php56-amzn1-security★ 0githubgithub.com/CYB3RW07F/PHP2Shell-CVE-2026-109618-CVE-2026-109619★ 0vulncheckvulncheck.com/xdb/65f0f081b8a8no verificadovulncheckvulncheck.com/xdb/e44c6969dc04no verificadovulncheckvulncheck.com/xdb/7d0c5b211db2no verificadovulncheckvulncheck.com/xdb/82c8157f3effno verificadovulncheckvulncheck.com/xdb/c8976422eb09no verificadovulncheckvulncheck.com/xdb/ac71fe89bd3cno verificadovulncheckvulncheck.com/xdb/dc75f190c655no verificadovulncheckvulncheck.com/xdb/17ab0c3ae77eno verificadovulncheckvulncheck.com/xdb/45affc5c9d8bno verificadovulncheckvulncheck.com/xdb/adc2e1185f46no verificadovulncheckvulncheck.com/xdb/52f692169948no verificadovulncheckvulncheck.com/xdb/8d7eb4964110no verificadovulncheckvulncheck.com/xdb/cf527c9cef91no verificadovulncheckvulncheck.com/xdb/34f5aea94444no verificadovulncheckvulncheck.com/xdb/b5cc5cb5719ano verificadovulncheckvulncheck.com/xdb/91e93fb07d47no verificadovulncheckvulncheck.com/xdb/ad71a30bfd37no verificadovulncheckvulncheck.com/xdb/eb42b9b104a1no verificadovulncheckvulncheck.com/xdb/1b62c36705dcno verificadovulncheckvulncheck.com/xdb/3e6b11979bacno verificadovulncheckvulncheck.com/xdb/5d53ecef352eno verificadovulncheckvulncheck.com/xdb/0e10e9c4433dno verificadovulncheckvulncheck.com/xdb/002034a00a66no verificadovulncheckvulncheck.com/xdb/a60373944289no verificadovulncheckvulncheck.com/xdb/9db17121b3beno verificadovulncheckvulncheck.com/xdb/968cf3175ab1no verificadovulncheckvulncheck.com/xdb/0fc37dba3352no verificadovulncheckvulncheck.com/xdb/8a4b3b2ac97bno verificadovulncheckvulncheck.com/xdb/2c580860eafeno verificadovulncheckvulncheck.com/xdb/6d96123a2537no verificadovulncheckvulncheck.com/xdb/11e8c2974505no verificadovulncheckvulncheck.com/xdb/030ec24a12bbno verificadovulncheckvulncheck.com/xdb/a34b3eab6393no verificadovulncheckvulncheck.com/xdb/a713ec1a8af8no verificadovulncheckvulncheck.com/xdb/fab665642d89no verificadovulncheckvulncheck.com/xdb/d9e91026fefcno verificadovulncheckvulncheck.com/xdb/87ee1750c866no verificadovulncheckvulncheck.com/xdb/377d818ba106no verificadovulncheckvulncheck.com/xdb/3478a338b06ano verificadovulncheckvulncheck.com/xdb/12a0a479946dno verificadovulncheckvulncheck.com/xdb/0783dd436a76no verificadovulncheckvulncheck.com/xdb/7359bbba0fc9no verificadovulncheckvulncheck.com/xdb/53c6ace1faa4no verificadovulncheckvulncheck.com/xdb/bbfe8fb953a3no verificadovulncheckvulncheck.com/xdb/f264b22a89eano verificadovulncheckvulncheck.com/xdb/5161befa4636no verificadovulncheckvulncheck.com/xdb/4aee390e43a1no verificadovulncheckvulncheck.com/xdb/9c87543de2e4no verificadovulncheckvulncheck.com/xdb/58139b9aa7f0no verificadovulncheckvulncheck.com/xdb/32156907916cno verificadovulncheckvulncheck.com/xdb/af4253d04063no verificadovulncheckvulncheck.com/xdb/9167e599e50dno verificadovulncheckvulncheck.com/xdb/58173c54405ano verificadovulncheckvulncheck.com/xdb/f3fcf1e074f1no verificadovulncheckvulncheck.com/xdb/223bfa8a19d6no verificadovulncheckvulncheck.com/xdb/1310f877688dno verificadovulncheckvulncheck.com/xdb/6019aac3cd2ano verificadovulncheckvulncheck.com/xdb/adcc844f8dcano verificadovulncheckvulncheck.com/xdb/e0c971f7b639no verificadovulncheckvulncheck.com/xdb/ececc28c859bno verificadovulncheckvulncheck.com/xdb/f3a957d7ed57no verificadovulncheckvulncheck.com/xdb/dcc582c3c243no verificadovulncheckvulncheck.com/xdb/3b56b9771a82no verificadovulncheckvulncheck.com/xdb/436207f17e5fno verificadovulncheckvulncheck.com/xdb/477110098f25no verificadovulncheckvulncheck.com/xdb/07e54b9b7bd4no verificadovulncheckvulncheck.com/xdb/095b8dc2510cno verificadovulncheckvulncheck.com/xdb/b2fe31698e8dno verificadovulncheckvulncheck.com/xdb/f4e4f2a650bano verificadovulncheckvulncheck.com/xdb/d1281e68896dno verificadovulncheckvulncheck.com/xdb/bfcb916df14cno verificadovulncheckvulncheck.com/xdb/6110cee6ededno verificadovulncheckvulncheck.com/xdb/96a90419a320no verificadovulncheckvulncheck.com/xdb/fee03c93721bno verificadovulncheckvulncheck.com/xdb/52f7afab42a6no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — PHP
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-109619CRITICALRCE via stale global stateEPSS 100.0%KEVCVE-2024-4577CRITICALArgument Injection in PHP-CGIEPSS 100.0%KEVCVE-2022-31626HIGHmysqlnd/pdo password buffer overflowEPSS 58.1%CVE-2022-31629MEDIUM$_COOKIE names string replacement (. -> _): cookie integrity vulnerabilitiesEPSS 49.6%CVE-2024-2756MEDIUM__Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fixEPSS 38.1%CVE-2024-1874CRITICALCommand injection via array-ish $command parameter of proc_open()EPSS 32.6%
Referencias
https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/https://cert-portal.siemens.com/productcert/html/ssa-566512.htmlhttp://seclists.org/fulldisclosure/2026/Oct/51https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79whttps://php2shell.delftintellab.comhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618https://www.wiz.io/blog/php2shell-php-rcehttp://www.openwall.com/lists/oss-security/2026/10/21/6http://www.openwall.com/lists/oss-security/2026/10/23/5