Detecting PHP2Shell CVEs with Graylog
PHP shipped emergency patches on October 21, 2026, for two unauthenticated remote code execution flaws, CVE-2026-109618 and CVE-2026-109619, known together as PHP2Shell. Both are rated 9.2 under CVSS 4.0. A working exploit leaked ahead of the coordinated disclosure, and Sansec expected mass exploitation within fifteen minutes of the release. Patch asap. Then work out whether […]