Vulnerability record

CVE-2026-109619

Exploitation: No known exploitation

Patch status

No official fix confirmed yet

Until a fix ships, follow the vendor's mitigations, limit exposure of affected systems, and watch this record for a patch.

Intelligence timeline

Developments from the last 30 days, newest first.

  1. Disclosed

    PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws

    Attackers are exploiting this at scale, so exposed affected systems are likely to be targeted quickly.

    Basis: Reporting by SecurityWeek

Coverage