PHP 8.4.26
AI overview
Sign in and the AI will write an overview from our coverage.
Headlines · 1
- Honeypot captures first reported PHP2Shell exploitation
Perplexity researcher Adel Karimi said six honeypot sensors detected PHP2Shell exploitation between 19:26 and 19:31 UTC on October 24. In a honeypot running PHP 8.4.26 with Apache mod_php, attackers launched /bin/sh and executed 35 shell processes through a four-stage attack involving memory pressure, an oversized PHPSESSID cookie, and adjustment of the final request using obtained memory addresses. The PHP development team patched CVE-2026-109618 and CVE-2026-109619, while Wiz and Calif said AI assistance helped them find the unusually destructive vulnerabilities.
iThome 台湾 · 🔥 0
Experience and discussion from the community
Share my PHP 8.4.26 experienceAsk about PHP 8.4.26
Nobody has shared their experience with PHP 8.4.26 yet.