INDBInternet News Database 2.5 Updated just now · 414 sources Show or hide images Light or dark

PHP2Shell: US updates Kev catalogue as exploits spread

1 source1 article First seen Updated United States

Save Compare coverage

Summary

<p>The US Cybersecurity and Infrastructure Security Agency (Cisa) has added the two so-called PHP2Shell vulnerabilities to its <a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog" target="_blank" rel="noopener">Known Exploited Vulnerabilities</a> (Kev) catalogue after confirming <a href="https://www.computerweekly.com/news/366652698/EU-makes-progress-towards-PHP-patching-UK-lags-behind" target="_blank" rel="noopener">live exploitation</a> by unnamed threat actors.</p> <p>The update addresses both CVE-2026-109618, a PHP memory corruption flaw, and CVE-2026-109619, a PHP stale…

Description from Computerweekly.

Who is covering this

  1. Computerweekly Center Factuality: Mostly factual US
    PHP2Shell: US updates Kev catalogue as exploits spread

    <p>The US Cybersecurity and Infrastructure Security Agency (Cisa) has added the two so-called PHP2Shell vulnerabilities to its <a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog" target="_blank" rel="noopener">Known Exploited Vulnerabilities</a> (Kev)...

Related stories