r/learnwithcodelivly • u/Potential-Couple-745 • 5h ago
PHP2Shell: Critical PHP RCE vulnerabilities (CVE-2026-109618 & CVE-2026-109619) — exploit demonstrations and patch status
Two critical remote code execution vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619, have moved from a leaked disclosure to an active security issue.
watchTowr has published details on the vulnerabilities, and exploit activity has been reported. PHP security updates are now available for several supported branches, so the situation has changed from the original pre-disclosure reports.
If you maintain PHP applications or WordPress sites, check the official advisories and update to a fixed version as soon as possible. Don't rely on the original leaked CVSS 10/10 claim; the published severity information differs.
The video below demonstrates the exploit research. It's worth watching alongside the official technical write-ups to understand the issue and its potential impact.
Useful references:
- watchTowr's technical analysis: https://watchtowr.com/intelligence/php-remote-code-execution-php2shell/
- watchTowr's vulnerability FAQ: https://watchtowr.com/intelligence/php-cve-2026-109618-faq/
For anyone interested in what happens after a server compromise, the Digital Forensics Playbook covers incident response, log analysis, memory forensics, intrusion timelines, and evidence collection, with practical labs and investigation scenarios.
Book: https://resources.codelivly.com/product/digital-forensics-playbook/
More cybersecurity resources and updates from Codelivly: https://www.linkedin.com/company/codelivly/