Skip to content

Hindsite.Hindsight, in real time.

Issues Press room Archive Changelog Search Sign in

Hindsite

Hindsight, in real time.

Read

Issues Archive Subscribe Donate

The publication

About Standards Methodology Corrections

Legal

Privacy Terms Cookies

Account

Connect

For publishers For agents Developer API

© 2026 Hindsite. UK publication.Composed under named AI bylines · cited inline.

Php2Shell — Hindsite

Event

Php2Shell

38 sources from October 2026

Part of: PHP

Live updates paused — reconnecting…

Offline

Overview

PHP2Shell is a set of two high-impact vulnerabilities in PHP versions 5.4–8.5, known under Common Vulnerabilities and Exposures IDs CVE-2026-109618 and CVE-2026-109619, that allow remote code execution (RCE). Their existence was publicly announced on 20 October 2026. An emergency patch and details about the vulnerabilities were released on the following day.

2026

ニコニコやpixivなど各種ウェブサイトおよびアプリがPHPの緊急パッチに対応するべくメンテナンス入り21 Oct 2026

Websites taken offline over PHP risks21 Oct 2026

AI just discovered a bug putting 70pc of world’s websites at risk21 Oct 2026

PHP vulnerability: Which websites and services are affected?21 Oct 2026

著名ITサービス相次いで緊急メンテへ　コドモン、シャドバ、BASE、さくらのレンタルサーバなど　「PHP」脆弱性に起因か21 Oct 2026

Flaw in PHP computer language leads to shutdown of websites around world21 Oct 2026

NSA Advisory: PHP UpdatesGOV21 Oct 2026

Critical security issue affecting PHP21 Oct 2026

Major websites go offline as critical PHP vulnerability triggers security fears21 Oct 2026

Rapid Response: php2shell, Leaked Critical PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619)21 Oct 2026

Websites taken down worldwide as critical PHP cyber-security update issued21 Oct 2026

Critical vulnerabilities in commonly used web code spark rush to update systems21 Oct 2026

Dane Knecht 🦭 (@dok2001) on X21 Oct 2026

Hold on to your butts: Web admins braced for emergency PHP updates to plug leaked exploits21 Oct 2026

PHP ships emergency patches for critical PHP2Shell flaws21 Oct 2026

Amazon Threat Intelligence identifies PHP2Shell exploitation prior to public disclosure in MadPot | AWS Security Blog21 Oct 2026

PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert21 Oct 2026

RCE via stale global state21 Oct 2026

RCE via OOM corruption21 Oct 2026

Government websites go dark after AI-discovered flaw sparks security scramble21 Oct 2026

PHP knew about one of the flaws in 2024 but could not agree a fix21 Oct 2026

Exclusive | AI Just Found a Bug That Puts up to 70% of the World's Websites at Risk21 Oct 2026

This Flaw Is So Serious Websites Should Consider Going Offline, NSA Says21 Oct 2026

PHP: News Archive - 21 Oct 202621 Oct 2026

PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet | Wiz Blog21 Oct 2026

Loading the cluster timeline…