CyberSecurity News

PHP2Shell (CVE-2026-109618) Exploit

Hacker News

· October 23, 2026

AI summary

A PHP2Shell exploit has been identified, associated with the CVE-2026-109618 vulnerability. The exploit is listed on Exploit-DB with the ID 52704. A discussion thread for the exploit is available on Hacker News, linked to a comments page on news.ycombinator.com. The post has garnered 2 points but no comments have been made yet. The exploit's details and potential impact are not specified in the available information.

Vulnerabilities mentioned

CVE-2026-109618

CRITICAL

CVSS 9.8

PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).

Read the full article at Hacker Newswww.exploit-db.com/exploits/52704

This is an AI-generated brief aggregated by HackerFeeds for convenience and grounded in the source’s own summary; the related CVE, threat-group and country data is from HackerFeeds’ own indexes. The original article is the authoritative source — all rights belong to Hacker News.