Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
PHP Remote Code Execution Vulnerability (CVE-2026-109618 / CVE-2026-109619) Advisory
Excerpt
Overview Recently, NSFOCUS CERT monitored the public disclosure of PHP Remote Code Execution (RCE) vulnerabilities (CVE-2026-109618 / CVE-2026-109619). Due to memory management flaws in PHP Core—where longjmp() handles Out-Of-Memory (OOM) errors leading to failed memory allocations, as well as various global state handling operations—a Use-After-Free (UAF) condition can occur. Unauthenticated remote attackers can trigger memory corruption by crafting specially designed…
Read the original report →Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-109618 | High | Score 83/100 | First seen |
| CVE | CVE-2026-109619 | High | Score 83/100 | First seen |
IOC Relationship Graph
Building graph…