Search all coverage

Vendor

PHP Group

PHP

Tracked CVEs

CVE-2026-109618 CVE-2026-109619 CVE-2024-4577KEV

Coverage timeline

Attackers Exploit PHP2Shell Faster Than Organisations Can Patch It
www.darkreading.com · Oct 23, 2026
Mirai Botnet Tries to Exploit PHP2Shell, but Finds No Way In
www.securityweek.com · Oct 23, 2026
Critical PHP Flaws Trigger Millions of Exploit Attempts in Days
securityaffairs.com · Oct 23, 2026
PHP Warns of Unpatched RCE Risk in Rare Session Configurations
thehackernews.com · Oct 23, 2026
Attackers exploit PHP2Shell flaws to build a Mirai derived botnet
thehackernews.com · Oct 23, 2026
Okta fixes critical Access Gateway flaws enabling remote code execution
securityonline.info · Oct 23, 2026
PHP Flaw Disclosures Trigger Widespread Scanning, but Not Confirmed Breaches
www.darktrace.com · Oct 23, 2026
Exposed PHP2Shell tooling targets PHP 8.4, but no sites were vulnerable
socradar.io · Oct 22, 2026
AWS Saw PHP2Shell Attacks Before Two Critical PHP Flaws Were Disclosed
securityaffairs.com · Oct 22, 2026
Gcore Offers Free Web Protection to Governments After PHP Attacks
securityonline.info · Oct 22, 2026
cPanel Patches Actively Exploited PHP Flaws Threatening Shared Hosting
securityonline.info · Oct 22, 2026
Attackers Target Critical PHP Flaws Before Patches Were Released
www.securityweek.com · Oct 22, 2026
QNAP Warns of Active PHP Flaws as Device Patches Remain Unavailable
securityonline.info · Oct 22, 2026
Over a Million PHP Systems Face Exploitation After RCE Flaws Go Public
www.securityweek.com · Oct 22, 2026
Amazon Detects PHP2Shell Exploit Attempts Targeting Its Honeypot
thehackernews.com · Oct 22, 2026
Critical PHP Flaws Enable Unauthenticated Code Execution on Servers
www.darkreading.com · Oct 21, 2026
Critical PHP Flaws Enable Remote Code Execution Without Login
www.rapid7.com · Oct 21, 2026
PHP Patches Two Unauthenticated RCE Flaws That Strike Before App Code Runs
securityonline.info · Oct 21, 2026
Critical PHP flaws enable remote code execution as exploit PoCs emerge
isc.sans.edu · Oct 21, 2026
Critical PHP Flaws Trigger Emergency Patches as Attacks Begin
www.malwarebytes.com · Oct 21, 2026
PHP Patches PHP2Shell Flaws After Attack Attempts Target Servers
www.securityweek.com · Oct 21, 2026
PHP Zero Days Put Millions of Websites at Risk of Remote Takeover
krebsonsecurity.com · Oct 21, 2026
Critical PHP flaws enable unauthenticated remote code execution across versions 5 to 8
securelist.com · Oct 21, 2026
PHP Patches Critical Unauthenticated Flaws That Expose Web Servers
thehackernews.com · Oct 21, 2026
Critical PHP Flaws Enable Remote Code Execution Across Web Servers
unit42.paloaltonetworks.com · Oct 21, 2026
NCSC urges PHP users to patch flaws that could enable server takeover
www.ncsc.gov.uk · Oct 21, 2026
Redtail miner spread via CVE-2024-4577 Libredtail HTTP attacks
isc.sans.edu · Apr 30, 2026