CVE · coverage timeline
CVE-2026-109619RCE via stale global state
40 articles from 17 outlets between 21 Oct and 26 Oct. First reported by SecurityOnline. The busiest day was Wed 21 Oct, with 17 articles.
- Articles
- 40
- all time · from 17 outlets
- Days covered
- 5
- of 6 days · all time
- Busiest day
- 17
- articles on Wed 21 Oct
- Last 7 days
- 5.7a day
- coverage began 6 days ago
- First report
- 21 Oct
- SecurityOnline
- Exploit probability
- 99.9%
- EPSS · higher than 99% of CVEs
Coverage over time
40 articles · 21 Oct – 26 Oct
- First report21 Oct · SecurityOnline
Show as table
| Day (UTC) | Articles | Outlets |
|---|---|---|
| Wed 21 Oct | 17 | SecurityOnline 2, The Hacker News 2, SecurityWeek 2, Ars Technica 1, NCSC 1, Infosecurity 1, SOCRadar 1, Unit 42 1, Securelist 1, Krebs on Security 1, Malwarebytes 1, SANS ISC 1, Rapid7 1, Dark Reading 1 |
| Thu 22 Oct | 7 | SecurityOnline 3, SecurityWeek 2, The Hacker News 1, Security Affairs 1 |
| Fri 23 Oct | 7 | The Hacker News 2, Darktrace 1, SecurityOnline 1, Security Affairs 1, SecurityWeek 1, Dark Reading 1 |
| Sun 25 Oct | 1 | The Hacker News 1 |
| Mon 26 Oct | 8 | SecurityOnline 2, SecurityWeek 2, Infosecurity 1, Security Affairs 1, The Hacker News 1, CISA 1 |
Articles
40 articles8 articles
- CISA adds actively exploited PHP flaw allowing unauthenticated code execution to KEVCISA · official notice
- Weekly recap tracks PHP and Node.js RCE flaws and supply chain attacksThe Hacker News · mentions it in passing
- Industrial Vendors Assess Products Affected by PHP2Shell FlawsSecurityWeek · mentions it in passing
- PHP2Shell Flaws Used to Gain Shells on Honeypot ServersSecurityWeek · mentions it in passing
- Cyfirma links PHP flaw scans to a North Korean campaignSecurity Affairs · mentions it in passing
- PHP warns of rare RCE flaw and advises disabling upload progressInfosecurity · mentions it in passing
- Weekly report flags PHP and FortiSIEM flaws under attackSecurityOnline · mentions it in passing
- PHP2Shell flaws put products running PHP at risk of remote code executionSecurityOnline · mentions it in passing
1 article
- PHP2Shell attackers target a European government entityThe Hacker News · mentions it in passing
7 articles
- Attackers Exploit PHP2Shell Faster Than Organisations Can Patch ItDark Reading · mentions it in passing
- Mirai Botnet Tries to Exploit PHP2Shell, but Finds No Way InSecurityWeek · mentions it in passing
- Critical PHP Flaws Trigger Millions of Exploit Attempts in DaysSecurity Affairs · mentions it in passing
- PHP Warns of Unpatched RCE Risk in Rare Session ConfigurationsThe Hacker News · mentions it in passing
- Attackers exploit PHP2Shell flaws to build a Mirai derived botnetThe Hacker News · mentions it in passing
- Okta fixes critical Access Gateway flaws enabling remote code executionSecurityOnline · mentions it in passing
- PHP Flaw Disclosures Trigger Widespread Scanning, but Not Confirmed BreachesDarktrace · mentions it in passing
7 articles
- AWS Saw PHP2Shell Attacks Before Two Critical PHP Flaws Were DisclosedSecurity Affairs · mentions it in passing
- Gcore Offers Free Web Protection to Governments After PHP AttacksSecurityOnline · mentions it in passing
- cPanel Patches Actively Exploited PHP Flaws Threatening Shared HostingSecurityOnline · mentions it in passing
- Attackers Target Critical PHP Flaws Before Patches Were ReleasedSecurityWeek · mentions it in passing
- QNAP Warns of Active PHP Flaws as Device Patches Remain UnavailableSecurityOnline · mentions it in passing
- Over a Million PHP Systems Face Exploitation After RCE Flaws Go PublicSecurityWeek · mentions it in passing
- Amazon Detects PHP2Shell Exploit Attempts Targeting Its HoneypotThe Hacker News · mentions it in passing
17 articles
- Critical PHP Flaws Enable Unauthenticated Code Execution on ServersDark Reading · mentions it in passing
- Critical PHP Flaws Enable Remote Code Execution Without LoginRapid7 · mentions it in passing
- PHP Patches Two Unauthenticated RCE Flaws That Strike Before App Code RunsSecurityOnline · mentions it in passing
- Critical PHP flaws enable remote code execution as exploit PoCs emergeSANS ISC · mentions it in passing
- Critical PHP Flaws Trigger Emergency Patches as Attacks BeginMalwarebytes · mentions it in passing
- PHP Patches PHP2Shell Flaws After Attack Attempts Target ServersSecurityWeek · mentions it in passing
- PHP Zero Days Put Millions of Websites at Risk of Remote TakeoverKrebs on Security · mentions it in passing
- Critical PHP flaws enable unauthenticated remote code execution across versions 5 to 8Securelist · mentions it in passing
- PHP Patches Critical Unauthenticated Flaws That Expose Web ServersThe Hacker News · mentions it in passing
- Critical PHP Flaws Enable Remote Code Execution Across Web ServersUnit 42 · mentions it in passing
- PHP2Shell Flaws Put PHP Servers at Risk of Remote Code ExecutionSOCRadar · mentions it in passing
- PHP2Shell flaws threaten remote code execution across PHP websitesInfosecurity · mentions it in passing
- NCSC urges PHP users to patch flaws that could enable server takeoverNCSC · official notice · mentions it in passing
- Critical PHP2Shell flaws could expose servers to remote code executionSecurityWeek · mentions it in passing
- PHP Prepares Emergency Fixes for Two Critical RCE FlawsThe Hacker News · mentions it in passing
- PHP Warns of Critical Flaws That Could Expose 1.3 Million HostsArs Technica · mentions it in passing
- PHP Prepares Critical RCE Fixes as Leaked Flaws Raise AlarmSecurityOnline · first report · mentions it in passing
No articles in this range.