CERT24CISA adds PHP2Shell vulnerabilities to its Known Exploited Vulnerabilities catalogLoading data…
CERT24Threat Observatory
Period

CISA adds PHP2Shell vulnerabilities to its Known Exploited Vulnerabilities catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the PHP vulnerabilities associated with PHP2Shell to its Known Exploited Vulnerabilities catalog. The vulnerabilities are CVE-2026-109618, a PHP memory corruption vulnerability, and CVE-2026-109619, a PHP stale internal request-state vulnerability.

← Back to intelligence

CISA adds PHP2Shell vulnerabilities to its Known Exploited Vulnerabilities catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the PHP vulnerabilities associated with PHP2Shell to its Known Exploited Vulnerabilities catalog. The vulnerabilities are CVE-2026-109618, a PHP memory corruption vulnerability, and CVE-2026-109619, a PHP stale internal request-state vulnerability.