Critical RCE vulnerabilities in PHP and Kaspersky detection
Kaspersky analyzes the leak of information regarding critical vulnerabilities CVE-2026-109618 and CVE-2026-109619 in PHP.
A recent incident led to the leak of information regarding two critical RCE vulnerabilities in PHP, identified as CVE-2026-109618 and CVE-2026-109619.
The publisher Kaspersky analyzed the event, confirming that its security solutions are capable of detecting the related exploit, named PHP2Shell. In the submitted report, several practical examples are shown on how detection occurs through the use of KEDR, KATA, and KES products.