▲ 200 today1k starsShellNew · 5d old
Critical PHP RCE PoC Exploits CVE-2026-109618/109619
What is php2shell-CVE-2026-109618-CVE-2026-109619-PoC?
The repository provides a shell script that triggers a heap use-after-free in PHP’s session upload progress, enabling arbitrary command execution on vulnerable servers. It also includes mitigation steps and a quick-fix patch.
Who it is for
Web developers, sysadmins and security teams should test their PHP stacks with this PoC and apply the supplied fixes before attackers do.