OffSeq’s research examines PHP2Shell activity during the first 48 hours recorded by its Mirage honeypot fleet. The company says PHP2Shell had leaked before a patch was available. Its first exploit-shaped request arrived roughly 16 hours before the fix was shipped. The supplied report excerpt contains no further technical details.
Illustration: The Dev Dispatch
OffSeq’s research covers PHP2Shell activity during the first 48 hours observed by its Mirage honeypot fleet.
According to the report, PHP2Shell had leaked before its patch was available. The first request resembling an exploit reached the fleet about 16 hours before the fix shipped.
New reporting on php2shell shows the operational impact: organizations in several countries took government and institutional sites offline after BSI …
A Hacker News post reports an expected PHP announcement on 22 October 2026 at 18:00 CEST covering two remote-code-execution vulnerabilities with CVSS …
PHP2Shell describes a family of critical vulnerabilities in core PHP. According to the project, an attacker who needs no authentication may execute co…
Petecooper has apologized on Hacker News for an earlier post about the expected PHP RCE disclosures CVE-2026-109618 and CVE-2026-109619. The author sa…
Comments
No comments yet — be the first.
Open the discussion
No account or password needed — just enter your e-mail and we’ll send you a one-time sign-in link. First time here? You’re set up automatically.
Your rating will be applied automatically after you sign in.
Check your inbox
We’ve sent a sign-in link to …. Open it on this device — this tab will sign you in automatically.
Nothing arrived? Check your spam folder — and mark the mail as "Not spam" so it lands in your inbox next time.