Critical PHP vulnerabilities were exploited before a patch was released
🤖 AI-generated content — The title and summary were produced automatically by artificial intelligence, without human editorial review.
Amazon Threat Intelligence detected an attempted PHP2Shell exploit on October 17, days before Wednesday’s patch. The leaked flaws, CVE-2026-109618 and CVE-2026-109619, could enable remote code execution on vulnerable websites, including WordPress sites.
Continue in the app — vote & join in ➔Source: The Verge · via ahirlevel.hu