{
  "id": 16672590,
  "title": "PHP2Shell Security Flaws Now Successfully Exploited",
  "url": "https://urgent.news/2026/10/26/php2shell-security-flaws-now-successfully-exploited",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-26T23:00:00.000Z",
  "source": {
    "name": "Slashdot",
    "slug": "slashdot",
    "url": "https://yro.slashdot.org/story/26/10/26/2150206/php2shell-security-flaws-now-successfully-exploited"
  },
  "original_language": "en",
  "account": null,
  "summary": "The PHP2Shell vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619, have been successfully exploited in the wild, as reported by Adel Karimi, detection and response lead at Perplexity. The malicious activity was detected in honeypots recording evidence of remote code execution against an Apache mod_php installation running PHP 8.4.26. The exploitation resulted in an 800 KiB decoded cookie dump and a function address derived from that dump, which appears in the subsequent execution payload. The successful exploitation demonstrates a chain of events on an intentionally favorable single-worker mod_php profile, signaling a significant security concern for affected systems.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}