Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
Millions of PHP Servers Face RCE Risk as PHP2Shell Exploitation Attempts Emerge
Excerpt
CVEs: CVE-2026-109618, CVE-2026-109619 Severity: Critical Executive Summary Two critical vulnerabilities in the PHP runtime, tracked as CVE-2026-109618 and CVE-2026-109619 and collectively dubbed PHP2Shell, could allow unauthenticated attackers to execute arbitrary code on vulnerable web servers, including systems hosting WordPress, Drupal, and Joomla applications. Security researchers have reported exploitation attempts surrounding the October 21 emergency security release,…
Read the original report →Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-109618 | High | Score 84/100 | First seen |
| CVE | CVE-2026-109619 | High | Score 84/100 | First seen |
IOC Relationship Graph
Building graph…