Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
4 IOCs
PHP2Shell (CVE-2026-109618 & CVE-2026-109619): Critical PHP RCE Flaws, Affected Versions, and How to Fix Them
Excerpt
[Update] October 23, 2026: Exploitation attempts began on October 17, four days before PHP released fixes. SOCRadar found PHP2Shell exploit tooling on an exposed attacker server. PHP releases new patches. [Update] October 21, 2026, 14:00 UTC: PHP has released fixes for both vulnerabilities. See the subheading “PHP Releases Patches for PHP2Shell.” PHP2Shell is the name researchers now use for two critical vulnerabilities in PHP, the server-side language behind WordPress,…
Read the original report →Indicators of Compromise
Open the mindmap →4 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2024-4577 | Medium | Score 59/100 | First seen |
| CVE | CVE-2026-109618 | High | Score 83/100 | First seen |
| CVE | CVE-2026-109619 | High | Score 83/100 | First seen |
| CVE | CVE-2026-115560 | High | Score 69/100 | First seen |
IOC Relationship Graph
Building graph…