CVE-2026-109618

7 SitRep stories cite CVE-2026-109618, newest first. The record itself is at cve.org.

1. Monday, November 2, 2026 · Horizon editionPHP Exposure Estimate Calls for Targeted RemediationCVE-2026-109618 · CVE-2026-109619 · Potential exposure is not confirmed compromise
2. October 2026 · Monthly editionPHP Flaws Face Active ExploitationCVE-2026-109618 / CVE-2026-109619; fixes Oct 21, KEV additions Oct 26
3. Friday, October 30, 2026PHP2SHELL Attacks Achieve Root on Palo Alto Firewalls
4. Thursday, October 29, 2026PAN-OS Management Interfaces Face Active PHP RCECVE-2026-109618 · CVE-2026-109619
5. Saturday, October 24, 2026 · Weekend editionAWS Publishes WAF Mitigations for PHP2SHELLTemporary WAF rules · Multipart/form-data blocking · Body-size caps and rate limits
6. Thursday, October 22, 2026Patch and Hunt for PHP2SHELL RCE (CVE-2026-109618/CVE-2026-109619)
7. Wednesday, October 21, 2026Critical PHP RCEs CVE-2026-109618 and CVE-2026-109619 — 22.6M Exposed Instances