CISA confirms attackers are exploiting both PHP2Shell flaws
· thenextweb.com · popularity 20/100 · 0 similar stories today
Read the original at thenextweb.com →
Summary
The US Cybersecurity and Infrastructure Security Agency (CISA) has put both PHP2Shell flaws in its Known Exploited Vulnerabilities catalogue. It made the change on Monday, according to its alert. Federal civilian agencies have until Thursday, 29 October, to fix CVE-2026-109618 and CVE-2026-109619. Last week, CISA warned about the flaws but said it had not seen […] This story continues at The Next Web
Found in: The Next Web. Rating basis: single outlet; outlet tier 2 (unlisted); 1 feeds; feed position 6.