#CVE-2026-109619

AI-found PHP2Shell flaws are under active attack, CISA says — and now chained to root firewalls

CISA lists both PHP2Shell bugs as exploited, and Unit 42 says they were chained with a Linux kernel flaw to root firewalls. Fixed in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35.