> TritonInfoSec News
Home / Oct 28, 2026 / Story
0
#2 The Hacker News general October 27, 2026 at 04:37 UTC

CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution

By [email protected] (The Hacker News)

AI Summary

CISA added two critical PHP2Shell flaws — CVE-2026-109618 and CVE-2026-109619, both rated 9.2 CVSS — to its Known Exploited Vulnerabilities catalog, confirming active in-the-wild exploitation enabling unauthenticated remote code execution. Federal agencies were given a tight remediation deadline of Thursday to patch affected PHP deployments. The PHP project also issued a second emergency Windows package rebuild within five days to address the related Brotli library flaw CVE-2026-111497 affecting PHP 8.2 through 8.5.

Read full article → https://thehackernews.com/2026/10/cisa-confirms-ac…

Relevance score: 87.0/100

# More from October 28

  1. 1
    Code-execution flaw in UEFI firmware threatens most servers on planet Earth Ars Technica Security
  2. 3
    Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption The Hacker News
  3. 4
    Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads The Hacker News
  4. 5
    Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens The Hacker News
  5. 6
    Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected Computers The Hacker News
  6. 7
    Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key The Hacker News
  7. 8
    Tailscale warns of SSH flaws allowing root privilege escalation BleepingComputer
  8. 9
    UNM Health ransomware attack disrupts patient care, surgeries BleepingComputer
  9. 10
    HPE Patches Dozens of Critical Flaws in Networking Products SecurityWeek