3 reportsPriority High
The PHP2Shell disclosure
A critical PHP vulnerability has been disclosed, with reports of active exploitation in the wild, posing a risk to UK organisations using affected software.
First report Latest
What is going on
- A PHP memory corruption vulnerability was reported, involving two CVEs, with one confirmed as exploited in the wild.
- The disclosure of the PHP2Shell vulnerability follows reports of active exploitation, prompting rapid response measures.
- Additional vulnerabilities, including CVE-2026-0257, were also noted as being actively exploited in the wild.
- What to watch: Further details on the extent of exploitation and mitigation efforts by affected vendors could change the picture.
Reports in this story
Newest first. Each one is a separate event with its own sources and evidence.
- Priority HighType VulnerabilityLead report
Rapid Response: php2shell, Leaked Critical PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619)
- Priority HighType Vulnerability
Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257 (Updated October 19)
- Priority HighType Vulnerability
Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257 (Updated October 19)