Skip to content

CyberSIXT Search

CVE · coverage timeline

CVE-2026-109618RCE via OOM corruption

33 articles from 16 outlets between 21 Oct and 25 Oct. First reported by SecurityOnline. The busiest day was Wed 21 Oct, with 17 articles.

Articles: 33; all time · from 16 outlets
Days with coverage: 4; across 5 days
Busiest day: 17; articles on Wed 21 Oct
Last 7 days: 4.7a day; coverage began 5 days ago
First report: 21 Oct; SecurityOnline
Exploit probability: 12%; EPSS · higher than 96% of CVEs

Coverage over time

33 articles · 21 Oct – 25 Oct

21 OctFirst report21 Oct · SecurityOnline

Show as table

CVE-2026-109618: articles per day
Day (UTC)	Articles	Outlets
Wed 21 Oct	17	SecurityOnline 2, The Hacker News 2, SecurityWeek 2, Ars Technica 1, NCSC 1, Infosecurity 1, SOCRadar 1, Unit 42 1, Securelist 1, Krebs on Security 1, Malwarebytes 1, SANS ISC 1, Rapid7 1, Dark Reading 1
Thu 22 Oct	8	SecurityOnline 3, SecurityWeek 2, The Hacker News 1, Security Affairs 1, SOCRadar 1
Fri 23 Oct	7	The Hacker News 2, Darktrace 1, SecurityOnline 1, Security Affairs 1, SecurityWeek 1, Dark Reading 1
Sun 25 Oct	1	The Hacker News 1

Articles

33 articles

Sun 25 Oct1 article

19:00
PHP2Shell attackers target a European government entityThe Hacker News

Fri 23 Oct7 articles

20:59
Attackers Exploit PHP2Shell Faster Than Organisations Can Patch ItDark Reading
13:13
Mirai Botnet Tries to Exploit PHP2Shell, but Finds No Way InSecurityWeek
12:35
Critical PHP Flaws Trigger Millions of Exploit Attempts in DaysSecurity Affairs
12:00
PHP Warns of Unpatched RCE Risk in Rare Session ConfigurationsThe Hacker News · mentions it in passing
08:36
Attackers exploit PHP2Shell flaws to build a Mirai derived botnetThe Hacker News
04:30
Okta fixes critical Access Gateway flaws enabling remote code executionSecurityOnline
00:23
PHP Flaw Disclosures Trigger Widespread Scanning, but Not Confirmed BreachesDarktrace

Thu 22 Oct8 articles

16:01
Exposed PHP2Shell tooling targets PHP 8.4, but no sites were vulnerableSOCRadar
16:01
AWS Saw PHP2Shell Attacks Before Two Critical PHP Flaws Were DisclosedSecurity Affairs
15:23
Gcore Offers Free Web Protection to Governments After PHP AttacksSecurityOnline
13:29
cPanel Patches Actively Exploited PHP Flaws Threatening Shared HostingSecurityOnline
12:52
Attackers Target Critical PHP Flaws Before Patches Were ReleasedSecurityWeek
11:38
QNAP Warns of Active PHP Flaws as Device Patches Remain UnavailableSecurityOnline
10:14
Over a Million PHP Systems Face Exploitation After RCE Flaws Go PublicSecurityWeek
09:24
Amazon Detects PHP2Shell Exploit Attempts Targeting Its HoneypotThe Hacker News

Wed 21 Oct17 articles

19:59
Critical PHP Flaws Enable Unauthenticated Code Execution on ServersDark Reading
18:01
Critical PHP Flaws Enable Remote Code Execution Without LoginRapid7
18:01
PHP Patches Two Unauthenticated RCE Flaws That Strike Before App Code RunsSecurityOnline
17:54
Critical PHP flaws enable remote code execution as exploit PoCs emergeSANS ISC
17:11
Critical PHP Flaws Trigger Emergency Patches as Attacks BeginMalwarebytes
17:08
PHP Patches PHP2Shell Flaws After Attack Attempts Target ServersSecurityWeek
16:00
PHP Zero Days Put Millions of Websites at Risk of Remote TakeoverKrebs on Security
15:23
Critical PHP flaws enable unauthenticated remote code execution across versions 5 to 8Securelist
15:23
PHP Patches Critical Unauthenticated Flaws That Expose Web ServersThe Hacker News
14:06
Critical PHP Flaws Enable Remote Code Execution Across Web ServersUnit 42
11:00
PHP2Shell Flaws Put PHP Servers at Risk of Remote Code ExecutionSOCRadar
11:00
PHP2Shell flaws threaten remote code execution across PHP websitesInfosecurity
10:52
NCSC urges PHP users to patch flaws that could enable server takeoverNCSC · official notice
07:15
Critical PHP2Shell flaws could expose servers to remote code executionSecurityWeek
06:00
PHP Prepares Emergency Fixes for Two Critical RCE FlawsThe Hacker News
02:31
PHP Warns of Critical Flaws That Could Expose 1.3 Million HostsArs Technica
00:58
PHP Prepares Critical RCE Fixes as Leaked Flaws Raise AlarmSecurityOnline · first report