CVE Feed

    Dashboard / CVE / CVE-2026-109618

    CVE-2026-109618

    PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).

    Published:Oct 21, 2026
    Last Modified:Oct 23, 2026
    EPS:Oct 21, 2026
    EPSS Score:0.1162
    CVSS Score:9.8

    Affected Products

    Vendor
    Paloaltonetworks
    Product
    Pan-os
    Vendor
    Paloaltonetworks
    Product
    Panorama M-200
    Vendor
    Paloaltonetworks
    Product
    Panorama M-300
    Vendor
    Paloaltonetworks
    Product
    Panorama M-500
    Vendor
    Paloaltonetworks
    Product
    Panorama M-600
    Vendor
    Paloaltonetworks
    Product
    Panorama M-700
    Vendor
    Paloaltonetworks
    Product
    Panorama Virtual Appliance
    Vendor
    Paloaltonetworks
    Product
    Wf-500
    Vendor
    Paloaltonetworks
    Product
    Wf-500-b
    Vendor
    Php
    Product
    Php
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Hummingbird
    Vendor
    Siemens
    Product
    Ruggedcom Ape1808
    Vendor
    Siemens
    Product
    Ruggedcom Ape1808 Firmware

    Exploits

    https://www.exploit-db.com/exploits/52704https://github.com/0-draft/php2shell-anatomyhttps://github.com/0k1dok1/CVE-2026-109618-CHECKhttps://github.com/0ldbaby/php2shellhttps://github.com/0x1c1101/CVE-2026-109618-PoChttps://github.com/0x4148/CVE-2026-109618-php2shell-labhttps://github.com/0xBlackash/CVE-2026-109618https://github.com/0xgitpushpray/php2shellhttps://github.com/0xrsydn/php2shell-scanhttps://github.com/19h/CVE-2026-109618https://github.com/1amrahul/php2shell-cve-2026-109618-cve-2026-109619https://github.com/1Nightlovel/CVE-2026-109618https://github.com/1o-ya/php-cve-2026-109618-hotfix-guidehttps://github.com/463861437/guard-for-php74https://github.com/4B3R4M4-607D/php2shellhttps://github.com/4itec/php-7.4.3.3-patchhttps://github.com/5WARM-AI/php2shell-checkhttps://github.com/87sunitasingh-droid/RHYTHM-SINGHhttps://github.com/9hb/php2shell-pochttps://github.com/aancw/php2shell-scannerhttps://github.com/AbacusNin/php-radarhttps://github.com/abelncm/php2shell-claude-code-prompthttps://github.com/abenezer101/php2shellhttps://github.com/AbodyStudio/php2shell-shieldhttps://github.com/abraxas/php-oom-longjmphttps://github.com/absholi7ly/Deep-Technical-Report-CVE-2026-109618-CVE-2026-109619-PHP2Shellhttps://github.com/acronet-fr/windows-security-builds-for-phphttps://github.com/adamtamenne/php2shell-labhttps://github.com/Ademking/php2shell-migrationhttps://github.com/adityaaravind/php2shell-checkhttps://github.com/adriyansyah-mf/CVE-2026-109618-109619-PHP-session.upload_progress-Exploit-https://github.com/aduli198/CVE-2026-109618_CVE-2026-109619https://github.com/AdZoic/php2shell-checkhttps://github.com/Agentic-DFIR/PHP2Shellhttps://github.com/AGI-CEO/paladin-php-rescue-mcphttps://github.com/AGI-CEO/php2shell-wordpress-to-nextjs-mcphttps://github.com/agrresore/php2shellhttps://github.com/ahallais/php71-debian9-backporthttps://github.com/ahallais/php82-ubuntu2404-backporthttps://github.com/AIjennings/ariawave-php2shell-scannerhttps://github.com/aiuser888-bot/php-7.3.33-cve-2026-109618-109619https://github.com/akamor2800/php-5.4-cve-2026-php2shell-patchhttps://github.com/al4n4n/php2shellhttps://github.com/alanh0vx/php2shell-checkhttps://github.com/aledus10/PHP2Shell-Labhttps://github.com/alefkaue/php2shell-security-assessorhttps://github.com/Alex-Goaga/synology-dsm6-php74-php2shellhttps://github.com/AlexVargasV/php2shell-response-kithttps://github.com/alham-rizvi/php2shell-scannerhttps://github.com/alibanhakeia2018/malac-php-imagehttps://github.com/ali-security/php-5.6.40-sp1-buildhttps://github.com/allureluoli/php2shell-labhttps://github.com/alvarodh5/php2shellhttps://github.com/alvaroguzmancode/CVE-2026-109618https://github.com/alvleont/php-patch-claude-skillhttps://github.com/alvm/php2shell-eol-backporthttps://github.com/amahjoshdevsec/php2shell-shieldhttps://github.com/AmanSin001/php2shell-checkhttps://github.com/amier-ge/php2shellhttps://github.com/AmpedWasTaken/PHP2Shell-CVE-2026-109618-CVE-2026-109619https://github.com/Amsozzer1/php2shell-repo-audithttps://github.com/Andrew2142/php73-backporthttps://github.com/andreysheva/homebrew-php2shell-doctorhttps://github.com/andreysheva/php2shell-doctorhttps://github.com/anldori/CVE-2026-109618https://github.com/anmolksachan/php2shellhttps://github.com/ansonhsu-ai/php2shell-cve-2026-109618-stehttps://github.com/anthonyhann/php-crisis-toolkithttps://github.com/antiburen/PHP2Shell-Probehttps://github.com/Anton-Barinov/php2shell-patcheshttps://github.com/Anwar0904/php2shell-guardhttps://github.com/aplite-de/php2shell-detection-ruleshttps://github.com/appsec-cz/php-eol-patchhttps://github.com/arifulislamat/php2shell-audithttps://github.com/arvion-ai/php-pinshttps://github.com/Arwy07/php2shell-remediation-guidehttps://github.com/assetnote/php2shell-scannerhttps://github.com/AsviS/PHP2Shellhttps://github.com/atarus-security/atarus-phpcheckhttps://github.com/atrailab/php-security-update-helperhttps://github.com/Autive/php2shell-watchhttps://github.com/AvaterXXX/CVE-2026-109618-CVE-2026-109619-https://github.com/avego/php2shellhttps://github.com/axon003/php-legacy-cve-2026-109618https://github.com/bagsiz/el7-php70-securityhttps://github.com/bagsiz/el7-php71-securityhttps://github.com/bagsiz/el7-php74-securityhttps://github.com/bagsiz/el8-php73-securityhttps://github.com/bagsiz/focal-php74-securityhttps://github.com/bagusindrayana/php-vuln-scanhttps://github.com/bahartanir/php2shellhttps://github.com/baron-stybd/CVE-2026-109618-CVE-2026-109619https://github.com/BartoszGarba/php2shell-sigma-ruleshttps://github.com/basesixtythree/B63-POC-CVE-2026-109618https://github.com/bashclub/php2shell-forensic-checkhttps://github.com/bee7813993/xampp-security-updatehttps://github.com/BenFerguson310/Cloudflare-PHP2shell-Detectionshttps://github.com/benjagdg/php2shell-ubuntu-fixhttps://github.com/Bhavye-Malhotra/php2shell-2026https://github.com/bianqiang-ui/phpscan-gohttps://github.com/BIBILZERODAY/PHP2Shell-CVE-2026-109618-CVE-2026-109619-Mass-Exploithttps://github.com/BigHackerManXD/php-upload-progress-hardening-wphttps://github.com/bitforce23-max/PHP2Shellhttps://github.com/bladehstream/php2shell_detecthttps://github.com/Blue-B/php2shell-guardhttps://github.com/Bluefire-Redteam-Cybersecurity/bluefire-php2shell-guardhttps://github.com/bogdik/php2shell-el7-el8-rpm-fixedhttps://github.com/BoheSama1999/php2shell-exphttps://github.com/break-the-build/php-multipart-waf-signalshttps://github.com/break-the-build/php-uploadprogress-wafhttps://github.com/BrenesRM/The-Kodiak-Shield-CD-Cyber-Range-Masterclass-en-PHP2Shellhttps://github.com/brentmartinmiller/php2shell-checkhttps://github.com/bsalunke/php2shell-labhttps://github.com/Bulletdev/php2shell-pochttps://github.com/cagritopuz/php2shellhttps://github.com/catscarlet/php-fpm-docker-PHP-7.4-CVE-2026-109618-109619-freehttps://github.com/CCNAHLHQ/php2shell_scanhttps://github.com/cereZ23/php-up-2026https://github.com/Certbn/PHP2Shell-CVE-2026-109618-CVE-2026-109619-https://github.com/chamrouensqa/php2shell-cve-pochttps://github.com/ChangWeiHong/php-cve-local-labhttps://github.com/charindithjaindu/CVE-2026-109618https://github.com/Charlie-Netdevops/php2shell-hostcheckhttps://github.com/ChaskarVinit/cve-2026-109618-php-oom-simulationhttps://github.com/checkfoxe/php56-session-uaf-patchhttps://github.com/ChlodAlejandro/php8.5-armv6l-binarieshttps://github.com/Chr1s-T/php2shell-cve-2026-109618https://github.com/chrisdfir/php2shell-detectionhttps://github.com/Chrishow2/php74-apache-suryhttps://github.com/citypeople/php2shellhttps://github.com/cj667113/OCI-Ansible-Fix-CVE-2026-109618_CVE-2026-109619https://github.com/cloudducoeur/ansible-playbook-CVE-2026-109618https://github.com/cm-suzuki-ryo/aws-waf-php2shell-post-guardhttps://github.com/CODEMaster-284/php2shell-audithttps://github.com/codesource/cve-checkhttps://github.com/codewizdevs/php2shell-watcherhttps://github.com/codiobert/runcloud-php2shell-patchhttps://github.com/coldcain-sec/php2shell-checkerhttps://github.com/colinyy/php2shell-exposure-checkhttps://github.com/CompleteTech-LLC/php2shell-checkhttps://github.com/completetech-security/php2shell-checkhttps://github.com/CompleTetech-Security/php2shell-checkhttps://github.com/Continuum-AI-Corp/orcacyber-php2shell-researchhttps://github.com/corelight/php2shell-detecthttps://github.com/covertswarmlabs/PHP2Shell-Checkhttps://github.com/cozybear-dev/cve-2026-109618https://github.com/cred0core/Sigma-rule-CVE-2026-109618https://github.com/cseelhoff-ms/php2shell-hunting-packhttps://github.com/ctkqiang/PHP2ShellPOC2026https://github.com/cumakurt/php2shell-scanhttps://github.com/CVEChecker26/dydhttps://github.com/CYB3RW07F/PHP2Shell-CVE-2026-109618-CVE-2026-109619https://github.com/Cyber-BansalAI/php2shell-2026https://github.com/cyberkiddle/CVE-2026-109618https://github.com/CyberRick-AI/php2shell-checkhttps://github.com/CyberRoute/php2shell-scannerhttps://github.com/CyberSunil/cybersunil.github.iohttps://github.com/CypherSecurity/php2shell-detectionhttps://github.com/D1a0y1bb/PHP2Shell-PoChttps://github.com/D1se0/php2shell_labhttps://github.com/D4RCKCYPH3R/php2shell-scanhttps://github.com/daffa001/php-CVE-2026-109618-CVE-2026-109619https://github.com/DandanLLab/PHP-5.6.40-CVE-2026-109618-109619https://github.com/danieljamesbertrand/php2shell-source-hotfixhttps://github.com/Daniel-wambua/php2shell-pochttps://github.com/danrod96-new/php-patch-checkhttps://github.com/daothinh/php2shell-monitor-rzhttps://github.com/darkfibr/php2shell-detecthttps://github.com/darkLabz001/php2shell-audithttps://github.com/DARKSTUFF-LAB/php2shell-pochttps://github.com/david-alvarez-rosa/php-rcehttps://github.com/debjit604/PHP2Shell-CVE-2026-109618-CVE-2026-109619https://github.com/deconstruction/EOLphp-php2shell-patcheshttps://github.com/defendable/PHP2Shellhttps://github.com/definitiveref/php2shell-CVE-2026-109618-109619-Researchhttps://github.com/delvin-45/php2shell-CVE-2026-109618-CVE-2026-109619-PoChttps://github.com/denizkoekden/php56-el-backportshttps://github.com/derazo1/php2shell-scannerhttps://github.com/devborlot/php2shell-fixhttps://github.com/devploit/php2shellhttps://github.com/devzyai/CVE-2026-109618-POChttps://github.com/dexteon/php2shell-pochttps://github.com/dhloyola/php2shell-fix-74https://github.com/dhloyola/php2shell-fix-php7https://github.com/digital-heroes-hamburg/wp-php2shell-checkhttps://github.com/DilanWW/php-cve-checkhttps://github.com/dinvisible1/nmap-php2shellhttps://github.com/dipsh0v/php2shell-emudhra-huntinghttps://github.com/dogussekerci/php-upload-progress-mitigationhttps://github.com/dos-security/php-critical-rce-advisoryhttps://github.com/dustyFski/php2shell-exposure-acceleratorhttps://github.com/eagle1maledetto/php5.6-wheezy-cve-2026-109618https://github.com/earlkun-ngga/ipehhttps://github.com/ecomyseo/ecom_blockrceflawshttps://github.com/edgarbaldemarmx/php2shell-remediationhttps://github.com/EfraimDiveroli-Pwn3d/PHP2shell_nuclei_templateshttps://github.com/egctl/php2shellhttps://github.com/EkaterinaMarchetti/Non-intrusive-PHP2Shell-assessment-for-CVE-2026-109618-and-CVE-2026-109619https://github.com/EkaterinaMarchetti/php2shell-assessment-globalhttps://github.com/eltonlaice/php2shell-pochttps://github.com/emirwtz/php2shellhttps://github.com/emirwtz/php2shell-audithttps://github.com/emphereio/php-eol-backportshttps://github.com/enactive-systems/CVE-2026-109618-pochttps://github.com/eness/php2shell-CVE-2026-109618-CVE-2026-109619-PoChttps://github.com/EngOREOO/php2shell-CVE-2026-109618-CVE-2026-109619-PoChttps://github.com/EQSTLab/CVE-2026-109618https://github.com/ericmann/php2shell-iochttps://github.com/errorfo/php2shellhttps://github.com/ersinkoc/php-fixhttps://github.com/E-Sherlock/php2shell-detection-engineering-labhttps://github.com/Ethen1212/php2shell-CVE-2026-109618https://github.com/EtherHamRadio/asl-node-checkhttps://github.com/EthicalHCOP/php2shell-Simple-Checkerhttps://github.com/ethoic-inc/php-vuln-checkhttps://github.com/euriconicacio/php2shell-validation-toolkithttps://github.com/Evil0ctal/php2shell-scannerhttps://github.com/exception0x876/php74-el7-patchedhttps://github.com/exch0-wuz-h3r3/php2shell-response-inspectorhttps://github.com/EXT-IT/php2shell-checkhttps://github.com/FacundoGimenez/php2shell-mitigationhttps://github.com/Faizan-Khanx/php2shellhttps://github.com/fardinbarashi/PHP-CVE-2026-109618-and-CVE-2026-109619https://github.com/farimazhar/php2shell-fix-toolkithttps://github.com/Fazmin/PHP2Shell-CVE-2026-109618-CVE-2026-109619-Mitigation-Info-PoChttps://github.com/fbuff-tools/php2shell-checkerhttps://github.com/Felix3322/PHP-uniDoShttps://github.com/fernandotellado/php2shell-wordpress-checkhttps://github.com/Filipegabri/RodMapAuditoriawebhttps://github.com/flawme/php2shell-scannerhttps://github.com/fletto2/php56-php2shell-patcheshttps://github.com/flexEST/php2shellhttps://github.com/flexEST/php2shell_checkerhttps://github.com/Flookerton/Am-I-Pwnedhttps://github.com/fmdiscioglu/php-cve-2026-109618-checkerhttps://github.com/fparch/php-cve-labhttps://github.com/franckferman/CVE-2026-109618https://github.com/FranklinF25/php2shellhttps://github.com/frnmrls/php70-cve-2026-backporthttps://github.com/fschell/toolshttps://github.com/fufufuwa/php2shell-detecthttps://github.com/g41277460-cpu/CVE-2026-109618-CVE-2026-109619-php2shell-https://github.com/gagaltotal/CVE-2026-109618-109619-php2shellhttps://github.com/Galeax/PHP2Shell-Mitigationshttps://github.com/Galeax/php2shell-scannerhttps://github.com/GarphenGate/php2shell-defender-toolkithttps://github.com/gasanthosh/php2shellhttps://github.com/geforester/php7.4-focal-php2shellhttps://github.com/gei-git/php2shell-pochttps://github.com/genetix/php2shell-diagnostichttps://github.com/getastra/php2shell-triagehttps://github.com/GetPageSpeed/php2shell-checkhttps://github.com/Ghost-Bx1/php-exploits-CVE-2026-109618-CVE-2026-109619-CVE-2024-4577https://github.com/Ghost-Bx1/POC-CVE-2026-109618-CVE-2026-109619-CVE-2024-4577https://github.com/ginoa79/php56-php2shell-backporthttps://github.com/gkwelding/php2shell-ioc-checkhttps://github.com/GlobalsecureAcademy/php2shell-scanner-CVE-2026-109618-CVE-2026-109619https://github.com/godylockz/cve-2026-109618-php2shellhttps://github.com/GOLF2546/PHP2Shell-CVE-2026-109618-CVE-2026-109619https://github.com/goodBoysss/php70-security-backporthttps://github.com/goodcoddeo/pterodactyl_PHP-CVE-2026-109618-CVE-2026-109619https://github.com/googlesky/GHSA-w8hw-w9fx-j79whttps://github.com/gputier/php-rfc1867-guardhttps://github.com/gregoirer-mediactive/phphttps://github.com/grergea/php81-el7-php2shellhttps://github.com/grupooruss/php2shell-assessment-globalhttps://github.com/grupooruss/php2shell-testhttps://github.com/guaidao2/php2shell-exploit-labstylehttps://github.com/gukHyeonGeum/cve-2026-109618-109619-el7https://github.com/gumerzzzindo/php2shell-CVE-2026-109618-109619https://github.com/guoziyu415/php2shell-checkhttps://github.com/h1-wh0areu/PHP-CVE-Scannerhttps://github.com/h3r2ym/Check-PHP-Docker-CVE-2026-109618---109619https://github.com/ha1c9on/php2shellhttps://github.com/HackSpeak/CVE-2026-109618https://github.com/hanyuanchen08-netizen/php-exposure-audithttps://github.com/haobachang-1/php2shell-CVE-2026-109618-CVE-2026-109619https://github.com/hellbound2307/php2shell-labhttps://github.com/hezhidong/php2shell-guardhttps://github.com/hiramcoop/php2shellscanhttps://github.com/hirokidaichi/php56-cve-2026-backport-experimenthttps://github.com/hkoeck/php2shell-statushttps://github.com/hoed/php2shellhttps://github.com/hoehyeonlab/php-cve-2026-109618-checkhttps://github.com/HORKimhab/CVE-2026-109618-619https://github.com/HOSTED-POWER/php_uploadprogress_guardhttps://github.com/htobty/php2shell-checkhttps://github.com/Huboxt/php-base-imageshttps://github.com/hugo8xx/php2shell-wafhttps://github.com/hyderoo/php2shell-checkhttps://github.com/hypnguyen1209/php2shellhttps://github.com/ihsansencan/Php2Shell-Labhttps://github.com/ikow/php2shell-pochttps://github.com/imaginal/docker-php74-trixiehttps://github.com/imhyunho99/php2shell-shieldhttps://github.com/imranulbari/php-security-update-helperhttps://github.com/imsarah/php2shell-hardening-for-agentshttps://github.com/Incerto-inc/php-vuln-check-2026-10https://github.com/inetzombie/php2shell-checkhttps://github.com/intelliroot-tech/php2shellhttps://github.com/ionsec/php2shell-detectorhttps://github.com/Is4yev/php2shell-pochttps://github.com/isaca0315/cve-2026-109618-109619-session-upload-progress-triggerhttps://github.com/iSecNG/php2shell-honeypothttps://github.com/ITlusions/ITL.PHP2Shell.Hardeninghttps://github.com/it-reinbek/php2shell-auditorhttps://github.com/itzen300/php2shell_RCEhttps://github.com/ivanscm/php80-cve-2026-109618https://github.com/izdir/php-security-patcherhttps://github.com/jaba0x/php2shell-guardhttps://github.com/JackLiKa/php2shell-scanhttps://github.com/JackReaper1020/php_oomhttps://github.com/Jamsux/php2shell-checkhttps://github.com/jarohull-ai/jfp-edge-radarhttps://github.com/jeffreyesdavid/php-guardianhttps://github.com/jeffschafer/Bigfix-PHP-Vulnerability-Scanner-Content-CVE-2026-109618-CVE-2026-109619https://github.com/jejex0/php2shell-scannerhttps://github.com/jensb1/php-8.2.34-session-uaf-rcehttps://github.com/jf0x3f/php2shell-pocshttps://github.com/jlrodriguezdev/laravel-bot-protectionhttps://github.com/jniedergang/php74-el7-php2shellhttps://github.com/JoasASantos/php2shell-exploithttps://github.com/JoasASantos/php2shell-labhttps://github.com/JoasASantos/php2shell-scannerhttps://github.com/joec4i/docker-library-phphttps://github.com/joei007/PHP-5.6.40-Patchedhttps://github.com/johanych/php2shell-checkerhttps://github.com/JohnHansonTheDev/phpreaperhttps://github.com/jorgbot/PHP2Shellhttps://github.com/josemingorance/php74-php2shell-backport-dockerhttps://github.com/JoshRob297/php2shell-researchhttps://github.com/joshuarosato/php2shell-pochttps://github.com/jsrobinson3/php74-focal-cve-2026-109618https://github.com/Julien-TrentAI/php2shell-trent-fixturehttps://github.com/julio-romo-muninn/PHP2SHELLhttps://github.com/juliosuas/php2shell-checkhttps://github.com/JumpsecLabs/phpocalypsehttps://github.com/junaire/CVE-2026-109618-exploithttps://github.com/JVCSampaio/php2shell-hardeninghttps://github.com/jzgyhlove/php2shell-windowshttps://github.com/k0x-offsec/php2shell-shieldhttps://github.com/K4ySuh/php-oneshot-checkerhttps://github.com/kaaangumus/php2shell-kithttps://github.com/kaaangumus/php2shell-nucleihttps://github.com/KadkinRoman/php84-migration-reporthttps://github.com/kamalmjt/PHP2SHELL-Patchhttps://github.com/kamibutt143/php-7.3-php2shell-backporthttps://github.com/KanyCrew/php2shell-pochttps://github.com/karlisl/php2shell-ruleshttps://github.com/KByteITServices/php-vulnerability-checker-october-2026https://github.com/kernelkill/PoC_f5_php2shell.shhttps://github.com/Kernovix/php2shell-fix-checkhttps://github.com/Kindredman/php2shell-host-audithttps://github.com/kipmyk/PHP2Shellhttps://github.com/kiran-ox/php2shell-checkhttps://github.com/kishwordulal2005/CVE-2026-109618-and-CVE-2026-109619-Exploithttps://github.com/kitten443/php2shellhttps://github.com/kjry8sb/php2shell-wordpress-rce-fullchainhttps://github.com/kowalski-analysis/php2shell-checkerhttps://github.com/krisztianhari-wq/php2shell-scanhttps://github.com/KtebhTeam/php2shellhttps://github.com/kunshdeep2812/php2shell-scannerhttps://github.com/kuwoo/php2shell-Labhttps://github.com/Kyros0324/CVE2026https://github.com/l3tchupkt/php2shellhttps://github.com/lankahost/lankahost-php-patch-checkhttps://github.com/larsactionhero/php-patch-checkhttps://github.com/latadeloco/agent-php2shellhttps://github.com/laurentlevi/dt-managed-php-versionshttps://github.com/leejongyoung/php2shell-krhttps://github.com/leejongyoung/php2shell-triagehttps://github.com/LeisureLinux/php2shellhttps://github.com/LeminEly/CVE-2026-109618-109619https://github.com/LeonelArrua/CVE-2026-109618_CVE-2026-109619_Mitigatehttps://github.com/leonewt0n/php2shell-pochttps://github.com/LeonKK/PHP2Shell-Scannerhttps://github.com/leonlai-tw/php-eol-cve-2026-109618-109619https://github.com/lesterlam/php2shell-labhttps://github.com/Leviticus-Triage/php2shell-unchainedhttps://github.com/Lexsah/php2shell-detectionhttps://github.com/LHeiakim/php2shell-full-pochttps://github.com/Liam-G/php2shell-audithttps://github.com/LightSpeedC/20261022-research-php-cvehttps://github.com/litobro/php2monhttps://github.com/liuhahi/test-phphttps://github.com/llrrzz-111/php2shell-guardhttps://github.com/logesh-GIT001/php2shellhttps://github.com/louzaonet/php2shell_hunthttps://github.com/louzaonet/php2shell_hunt_ispconfighttps://github.com/Ls-ComCSIRT/php2shell-scanhttps://github.com/lucasbarros097/PHP2Shell__CVE-2026-109618__CVE2026-109619https://github.com/luivc1/php-vuln-responderhttps://github.com/lushinshang/php2shell-cve-2026-109618https://github.com/lynolz163/php2shell-research-publichttps://github.com/lzz0403/CVE-2026-109618-PHP2Shell-pochttps://github.com/m16a4666/php2shell-fixhttps://github.com/Magicalname/php2shell-guardhttps://github.com/mahumadad/php2shell-analysishttps://github.com/maikbehring/php-notbetriebhttps://github.com/MakFly/php2shell-checkhttps://github.com/malikad778/php2shell-guardhttps://github.com/mamarce/php-vulns-discovered-23-10-2026https://github.com/manshoor/php2shell-scannerhttps://github.com/manteiga-foundation/php2shell-labshttps://github.com/manuxio/untested-php2shell-fixed-php-5-4-apachehttps://github.com/manuxio/untested-php2shell-fixed-php-5-4-fpmhttps://github.com/manuxio/untested-php2shell-fixed-php-7-2-apachehttps://github.com/manuxio/untested-php2shell-fixed-php-7-2-fpmhttps://github.com/manuxio/untested-php2shell-fixed-php-fpm-mod_phphttps://github.com/Marciano-Morinigo/php2shell-CVE-2026-109618-CVE-2026-109619-PoC-Labhttps://github.com/marcotorres/php2shell-demohttps://github.com/Marven11/PHP2Shell-PoChttps://github.com/maxprog-svg/PHP2Shell-CVE-2026-109618-CVE-2026-109619https://github.com/mbadis-dev/php-cve-2026-109618-toolkithttps://github.com/mbelsis/php2shell_scanhttps://github.com/mc493/php2shell-enterprise-hardening-cve-2026-109618-109619https://github.com/mefulton/CVE-2026-109618-analysishttps://github.com/mefulton/CVE-2026-109618-php56-publichttps://github.com/mehmetkuruyuz/php-cve-audithttps://github.com/mejustbox-byte/CVE-2026-109618-CVE-2026-109619https://github.com/mekhalleh/php2shell-advisoryhttps://github.com/MelchiorKokernoot/frankenphp-php8.4.27https://github.com/memuratozturk/php2shell-pochttps://github.com/mengchencloud/aws-php2shell-mitigationhttps://github.com/meowmeow34spec/php2shell-namu-krhttps://github.com/meta-l/WordPress-PHPVuln-Triagehttps://github.com/meuhland/php-legacy-windows-buildshttps://github.com/mikensec/php2shell-labhttps://github.com/mirrored-projects/PHP74-Windows-CVE2026https://github.com/MKA930/php2shell-remediation-guidehttps://github.com/mnk-works/php2shell-verifyhttps://github.com/mohamedation/php2shell-scannerhttps://github.com/MomoRizza/php2shellhttps://github.com/moonkit02/php2shell-pochttps://github.com/moorwald/mautic4-legacyhttps://github.com/MorphingYU/CVE-2026-109618https://github.com/mostofajr7-sudo/CVE-2026-109618-CVE-2026-109619-php2shell-https://github.com/mothproof3512/php2shell-scanhttps://github.com/mpyw/php-eol-CVE-2026-109618-109619https://github.com/MRdark-ops/php2shellhttps://github.com/mrmtwoj/php-cve-2026-109618-fixerhttps://github.com/MrPrinceRawat/php2shell-behind-nginxhttps://github.com/msoni11/msphp2shellhttps://github.com/mspiq/php2shell-scannerhttps://github.com/murrez/php2shellhttps://github.com/mym0us3r/PHP2Shell-Detection-with-Wazuhhttps://github.com/namest504/PHP2Shell-Pochttps://github.com/nanoarmando/php-focal-backportshttps://github.com/NaNoBotCo/php-patchhttps://github.com/naravid19/php2shell-iochttps://github.com/Nayrae/CVE-2026-109618https://github.com/neelsomani/benevolent-phphttps://github.com/neoqmin/php2shellhttps://github.com/nesirat/php2shell-guardhttps://github.com/nestorwheelock/php2shell-remediatehttps://github.com/netbadgersltd/php72u-buildhttps://github.com/newtro/php2shell-site-checkhttps://github.com/nft-syou/php-5.4.45-php2shell-patchhttps://github.com/Nguemoue/project2026_20261023_php_rce_guardhttps://github.com/Nguemoue/project2026_20261024_php2shellcheckhttps://github.com/niemingxing/php73-php2shell-patchhttps://github.com/nikhilyadav551/php2shelhttps://github.com/nirzadokox/php2shell-vulnerability-check-for-CVE-2026-109618-CVE-2026-109619https://github.com/nocerainfosec/php2shell-checkerhttps://github.com/nokitakaze/CVE-2026-109618-109619-checkerhttps://github.com/Noshadi-sec/cve-2026-109618-109619-pochttps://github.com/Nostraxiten/PHP2shellhttps://github.com/nsrg-fmlorg/php-cve-2026-109618https://github.com/nsrivastava2velsof/php56-php2shell-patchhttps://github.com/nukIeer/CVE-2026-109618-109619-checkerhttps://github.com/nukIeer/php2shell-checkerhttps://github.com/NULL200OK/php2shell-detecthttps://github.com/nurlanchip/PHP2SHELL-POC-Lab-CVE-2026-109618-CVE-2026-109619https://github.com/nwfella/php2shell-advisoryhttps://github.com/Officerwasu/php2shellhttps://github.com/Okymi-X/CVE-2026-109618https://github.com/OmerAti/php-5.6.40-CVE-2026-109618-109619.patchhttps://github.com/Opathedane/php2shellhttps://github.com/open0x01/php2shellhttps://github.com/orbitron-ai/php2shell-response-kithttps://github.com/pagvac/php2shell-detecthttps://github.com/pagvac/php2shell-trendshttps://github.com/PapaBill1234/php2shell-toolkithttps://github.com/PasqualePillitteri/php2shell-hardeninghttps://github.com/pattingbabies/php2shell-CVE-2026-109618-109619https://github.com/paulamckenzie9193/php2shell-checkhttps://github.com/pax-k/Php2Shell-POChttps://github.com/pentestershell/php2shellbthttps://github.com/pete-builds/php-security-release-2026-10https://github.com/php2-shell/php2shell-POC-CVE-2026-109618-CVE-2026-109619https://github.com/PHPatch/phpatchscanhttps://github.com/PHPatch/phpscanhttps://github.com/phpfixes/phpfixes-php2shellhttps://github.com/plob881/php2shell-shieldhttps://github.com/Poellie01/PHP2Shell-Verification-Scripthttps://github.com/PouriaMeshgini/php2shellhttps://github.com/Pr0fEs0r-X/PHP2ShellX-https://github.com/projetoroot/php2shell-guardhttps://github.com/pro-m16/CVE-2026-109618-php2shell-labhttps://github.com/prox3000/php-7.4-focal-cve-patchedhttps://github.com/pruiz/php-CVE-2026-109618https://github.com/pruthvi0820-cell/phpguardhttps://github.com/psylinux/php2shell-checkhttps://github.com/puffert/php-critical-rce-scannerhttps://github.com/Py0x11/php2shell-detectionhttps://github.com/Qsnh/php2shell-fixedhttps://github.com/Quaerendir/php2shell-audithttps://github.com/r0x43g/php2shell-vendor-watchhttps://github.com/r3c0nd4t4/php2shell-verifyhttps://github.com/radito/php74-backporthttps://github.com/raeseoklee/php-safepatchhttps://github.com/Rahat463/patchferry-checkhttps://github.com/rahnas/php2shell-autofixhttps://github.com/rajasekharponakala/php2shell-briefhttps://github.com/rattones/php2shell-checkhttps://github.com/ravhirizaldi/php2shell-engine-rcehttps://github.com/rdwr-namikb/php2shell-cve-2026-109618-109619-labhttps://github.com/RemiPelloux/php-session-upload-progress-uafhttps://github.com/renyang-create/php2shell-reprohttps://github.com/revonnet/php-fixhttps://github.com/reza-ghanbari-adivi/php2shell-scannerhttps://github.com/rjmendez/phpup-2026https://github.com/rmnelson/php-5.3.29-cve-2026-109618-109619https://github.com/RobertoCifre/php2shell-checkhttps://github.com/rodrigocolozio/php2shell-checkhttps://github.com/ronoski/php2shell-detecthttps://github.com/rootone-it/nginx-php2shell-monitorhttps://github.com/rpersak/php2shell_checkhttps://github.com/RuanSerraAzul/CVE-2026-109618-POChttps://github.com/ruban-s/php-8.1-windows-securityhttps://github.com/runasy-koonta/php2shell-7.4.33-pochttps://github.com/RuxaXa/php2shell-sapi-differentialhttps://github.com/ryantseng24/php2shell-f5-waf-toolshttps://github.com/ryuhaneul/php-el7-cve-2026-109618https://github.com/saaudsdk/php2shell-cve-2026-109618-109619-fixhttps://github.com/sajadonline/patch-php2shellhttps://github.com/sajjadh47/php2shell-phphttps://github.com/SamJUK/php2shell-check-cve-2026-109618https://github.com/san3ncrypt3d/php-oom-corruption-labhttps://github.com/Sanal-Lince/PHP-Shell-v0.1https://github.com/Sanal-Lince/PHP-Shell-v0.3https://github.com/SANAULLAH-AI/php2shell-safe-learning-labhttps://github.com/sanketkokate712/php2shell-fixhttps://github.com/SanWRoot/php2shell-LAB-POC-https://github.com/sawula7/php72-php2shell-backporthttps://github.com/scadastrangelove/php2shellhttps://github.com/scardotdev/php2shell-helperhttps://github.com/scriptsnet/php2shell-security-toolkithttps://github.com/scriptzteam/Paranoid-PHP2Shellhttps://github.com/sdminev/php2shell-pochttps://github.com/SeanDishman/php2shell-CVE-2026-109618-CVE-2026-109619https://github.com/Secragon/php2shell-radarhttps://github.com/securibee/php2shell-tenable-skillhttps://github.com/securin-public/php2shell-checkerhttps://github.com/segfaultx01/php2shell-pocJavalihttps://github.com/segfo/php2shell-pochttps://github.com/seguridadentrerios/CVE-2026-109618-CVE-2026-109619https://github.com/Senturkselim/Am-I-Infectedhttps://github.com/seppegadeyne/php2shell-runcloud-buildshttps://github.com/serkanburat/php74-patched-windowshttps://github.com/shadowofleaf96/php2shell-php7-mitigation-kithttps://github.com/Shadow-Pixxxel/php-advanced-huntinghttps://github.com/shivabalaj/CVE-2026-109618https://github.com/shivrajem/php2shell-detecthttps://github.com/SideeID/php2shellhttps://github.com/silastammerik/php2shell-mitigacaohttps://github.com/SirjanSingh/shiny-phphttps://github.com/skwirrel/php-cve-2026-109618-checkhttps://github.com/skydwn/CVE-2026-109618https://github.com/slabbdev/php2shell-cve-2026-109618-109619https://github.com/slabwren/php2shell-detectionhttps://github.com/smile178998/php2shell-toolkithttps://github.com/SmR492/php-7.2-CVE-2026-109618-109619https://github.com/SmR492/php-7.3-CVE-2026-109618-109619https://github.com/SoftCreatR/php81-php2shell-fixhttps://github.com/softjapan/php74-cve-patchedhttps://github.com/Sol0-dev/php2shellhttps://github.com/solymx/php-cve-2026-researchhttps://github.com/somisec/php2shell-scannerhttps://github.com/sonuoffsec/php2shell-detectorhttps://github.com/sorenjohanson/crowdsec-cve-2026-109618-rulehttps://github.com/SoroushAlamdari/php2shell-detecthttps://github.com/spade-kk/php2shell-exploithttps://github.com/spcaeo/php2shell-checkhttps://github.com/SPOTWHALE/php2shell-checkhttps://github.com/sprabhav7/php2shell-detectionhttps://github.com/squiblyza/CVE-2026-109618-CVE-2026-109619https://github.com/sqzer-x/php2shell-scannerhttps://github.com/sstrobl-osm/php2shell-toolshttps://github.com/Stensel8/check-for-CVE-2026-109618-CVE-2026-109619https://github.com/StiJans/php7.4-cve-109618-109619-fixhttps://github.com/StiJans/php8.1-cve-109618-109619-fixhttps://github.com/StiJans/php8-cve-109618-109619-fixhttps://github.com/Stonlifer/php2shellhttps://github.com/Stonlifer/php2shell-old2https://github.com/stufently/php-patched-imageshttps://github.com/Suleman-Elahi/php2shell-sentinelhttps://github.com/suleymanpetek/shadowphphttps://github.com/Suman99pro/php2shell-checkhttps://github.com/swap18plus/php2shell_CVE-2026-109618-and-CVE-2026-109619https://github.com/Swordsec/php2shell-guardhttps://github.com/sxyrxyy/php2shell-cve-2026-109618-checkhttps://github.com/syhunt/php2shell-protectionhttps://github.com/syrex1013/CVE-2026-109618https://github.com/syrex1013/php2shellhttps://github.com/TahuCryptsi/php2shell-checkhttps://github.com/tani2shell/php2shell-labhttps://github.com/taniungou/php2shell-labhttps://github.com/Taz1920/PHP-Canarywallhttps://github.com/Taz1920/php-sentinelhttps://github.com/techtaek77/php2shell-guidehttps://github.com/testerxma/php2shellhttps://github.com/testerxma/php2shellXhttps://github.com/the-berlin/bitrixvm-php-hotfixhttps://github.com/The-DevOps-Daily/php2shell-checkhttps://github.com/TheFool-TAROT/php2shell-labhttps://github.com/thegillion/uisp-php2shell-guardhttps://github.com/the-metafactory/php-patch-verifyhttps://github.com/TheMursalin/CVE-2026-109618https://github.com/ThePainter1939/php2shell-guardhttps://github.com/tiendungdev/php2shell-mitigationhttps://github.com/tmespro/php-emergency-mitigationshttps://github.com/tobiastillstam/Scan-PHP2Shellhttps://github.com/tommaru66-pixel/php2shell-poc-1https://github.com/toopster-com/php2shell-check-for-claudehttps://github.com/toxy4ny/php2shell-checkerhttps://github.com/tranlammankg/php2shell-scannerhttps://github.com/TREXNEGRO/php2shellhttps://github.com/Trupal25/php2shell-audithttps://github.com/tsepangnkoe/php2shell-audithttps://github.com/tuanhoma/CVE-2026-109618https://github.com/tumibroikakou/php_sec_patchhttps://github.com/turovskiy/php2shell-fixerhttps://github.com/tuwiliyt/cve-2026-109618https://github.com/ucrm-plugins/php2shellhttps://github.com/ultravistor/inthttps://github.com/umair-aziz025/PHP2Shellhttps://github.com/umer-r/php2shell-scan-revamphttps://github.com/unbelievable-digital/is-my-php-pwnedhttps://github.com/Unkn0vv/php2shellhttps://github.com/UrsusMagus/php74-windows-security-buildhttps://github.com/utkarsssh17/cve-2026-109618-php2shell-pochttps://github.com/VABISMO/php2shell-nginx-fpm-full-rcehttps://github.com/vaishnavucv/php2shellhttps://github.com/valentin-marquez/phphttps://github.com/vietvq/php-backport-7.4-apachehttps://github.com/viniciusbossle/php74-el7-php2shellhttps://github.com/vintage-alt/CVE-2026-109618-and-CVE-2026-109619-php2shell-burpproxyhttps://github.com/violensoul/php2shell-sigmahttps://github.com/viralchabhadiya/php-vulnerability-checker-and-fixhttps://github.com/vitalelele/CVE-2026-109618-PoChttps://github.com/vperetti/php-cve-2026-109618-109619-backportshttps://github.com/vulnace/PHP2Shellhttps://github.com/wakemeiflose/php2shellhttps://github.com/waksboy/fixed-fpm-cve-2026-109618-and-109619-imageshttps://github.com/waksboy/php-cve-2026-109618-109619-testerhttps://github.com/walt3rblake/php2shell-scannerhttps://github.com/want3d04/woxeshellhttps://github.com/waqas578/Plymouth-Retail-Ltd.---PHP2Shell-Vulnerability-Incident-Remediation-Reporthttps://github.com/wasdthedebugger/php2shellhttps://github.com/WeaveHubHQ/cf-waf-bypass-checkhttps://github.com/webninjjacoder/security-backports-for-php74https://github.com/WeMakeGood/php2shellhttps://github.com/wemio/php2shell-scanhttps://github.com/WeszNL/directadmin-php2shell-ansible-mitigationhttps://github.com/Whackermelon/Php2Shell-POChttps://github.com/whxylm/tdoa-php-cve-2026-109618-109619-patch-packagehttps://github.com/WildanDeveloper/php2shellhttps://github.com/wind884/CVE-2026-109618-109619-PHP2Shellhttps://github.com/WoYinDao/CVE-2026-109618-CVSS-9.2-Criticalhttps://github.com/wromansky/php2shell-warnhttps://github.com/wunamesst/php-cve-2026-109618-109619-patchhttps://github.com/x0xr00t/sl0ppy-php2shellscanhttps://github.com/xaviware/go-php2shell-scanner-CVE-2026-109618-CVE-2026-109619https://github.com/xbuddhi/php2shell-fixhttps://github.com/xC0D3F4TH3R/PHP2SHELL-DEFENSIVE-KIThttps://github.com/xjodoin/legacy-runtime-security-backporthttps://github.com/xPloits3c/PHP2Shellhttps://github.com/xqus/php2shell-checkhttps://github.com/xuehuolll/CVE-2026-109618-109619-audithttps://github.com/xuehuolll/php2shell-CVE-2026-109618-109619https://github.com/yanzyuyu/php2shell-prtcthttps://github.com/yanzyuyu/phptshellhttps://github.com/yehezkiel1086/php2shell-checkhttps://github.com/yetDevs/php2shell-triagehttps://github.com/yildirimserkan/php2shellscanner-webhttps://github.com/ytbsamsu007/CVE-2026-109618-109619-Docker-Lab-Tutorialhttps://github.com/yu1row/php-cve-2026-checkhttps://github.com/yzw641725631-boop/windows-php7-security-backports-for-PHP2Shellhttps://github.com/zake1god/php2shellhttps://github.com/zarguell/php2shell-scannerhttps://github.com/zdeneksvarc/wordpress-7.1.3-patched-php2shellhttps://github.com/zenzue/CVE-2026-109618_19https://github.com/Zeppperoni/PHP2Shell-detectorhttps://github.com/Zer061/CVE-2026-109618https://github.com/zerbaliy3v/php2shell-CVE-2026-109618-CVE-2026-109619-Dorkshttps://github.com/ZeroHackOrg/php2shell-pochttps://github.com/ZeroHunt-org/self-checkhttps://github.com/zhaoboy9692/CVE-2026-109618https://github.com/zhaoboy9692/CVE-2026-109618_https://github.com/zhqagp/php-7.2https://github.com/zhuyihenzheng/php2shell-reprohttps://github.com/ZiarenEASM/php2shell-probehttps://github.com/zNexoraTech/php2shell-detectorhttps://github.com/zr0n/php2shell

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-130 Excessive Allocation

    Related CVEs

    CVE-2026-109619 (CVSS 9.2) — PHP has various global state that temporarily points into request memory. In some scenarios, global state may …
    CVE-2026-0316 (CVSS 1.1) — A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious a…
    CVE-2026-0322 (CVSS 8.6) — A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software…
    CVE-2026-0301 (CVSS 1.7) — An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software en…
    CVE-2026-0279 (CVSS 1.3) — Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal (aka Captive Portal) servi…
    CVE-2026-0280 (CVSS 1.7) — An IPv6 packet processing vulnerability in the dataplane of Palo Alto Networks PAN-OS® software enables an una…
    CVE-2026-0281 (CVSS 2.1) — An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated atta…
    CVE-2026-0282 (CVSS 2.7) — A file deletion vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with …
    CVE-2026-0283 (CVSS 4.5) — An authentication bypass vulnerability in Large Scale VPN ( LSVPN) functionality of Palo Alto Networks PAN-OS …
    CVE-2026-0284 (CVSS 4.7) — An XML injection vulnerability in the Large Scale VPN (LSVPN) functionality of Palo Alto Networks PAN-OS® soft…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High