RW
RiskWire Real-time vulnerability intelligence
This week Pricing Live dashboard
Critical 9.2

CVE-2026-109618

Leak of PHP2Shell Exploit Exposing Critical PHP Remote Code Execution Vulnerabilities

Vendor / product: PHP
Event date: 2026-10-20
Public PoC: Yes
First tracked by RiskWire: 2026-10-21

Named threat actors

Calif.IO

Sources & citations (35)

+15 more sources

References

See CVE-2026-109618 in context

RiskWire tracks every exploited CVE this week, cross-referenced against CISA KEV with federal remediation deadlines. Filtered to your vendor stack.

Book a 20-min demo →