php2shell
-
The PHP2Shell Botnet Stampede: How Threat Actors Are Rushing to Weaponize Engine-Level RCE
According to reporting by The Hacker News, threat actors have unleashed millions of uncoordinated exploit attempts against newly disclosed unauthenticated remote code execution vulnerabilities dubbed “PHP2Shell” (CVE-2026-109618 and CVE-2026-109619). The flaws, which hold critical CVSS severity ratings of 9.2, exist directly within the underlying PHP engine rather than application-layer software, exposing tens of millions of…