PHP2Shell
BeInCrypto published the article about PHP2Shell PHP2Shell includes vulnerability CVE-2026-109618 PHP2Shell includes vulnerability CVE-2026-109619 Cloudflare was a target of attack attempts exploiting PHP2Shell Wiz Research reported that successful attacks on PHP2Shell could expose passwords and other sensitive information OpenAI led a two‑month coalition to fix PHP2Shell security firm Calif used GPT‑5.6 Sol to find a version of PHP2Shell in August GPT‑5.6 Sol identified PHP2Shell OpenAI’s own team found a fuller version of PHP2Shell in September Wiz independently found both flaws of PHP2Shell Finland pulled its government websites offline due to PHP2Shell Netherlands pulled its government websites offline due to PHP2Shell France pulled its government websites offline due to PHP2Shell Ryan Austin discovered PHP2Shell vulnerability Wiz discovered PHP2Shell vulnerability Eric Wallace worked on patching PHP2Shell vulnerability PHP2Shell vulnerability affects PHP core PHP2Shell vulnerability can expose RCE in WordPress PHP2Shell vulnerability can expose RCE in Drupal PHP2Shell vulnerability can expose RCE in Joomla Wiz Research confirmed an unauthenticated remote code execution against Drupal PHP Foundation warned about php2shell Wiz (cyber‑security firm) helped uncover php2shell PHP has the vulnerability 'php2shell' PHP shipped its fix for PHP2Shell Amazon logged a PHP2Shell exploitation attempt on 2026-10-17 BSI had no successful use of PHP2Shell Japan confirmed no attacks exploiting PHP2Shell CVE-2026-109618 is related to PHP2Shell PHP2Shell vulnerability was discovered by Wiz OpenAI commented on the PHP2Shell vulnerability White House commented on the PHP2Shell vulnerability UK’s National Cyber Security Centre issued a warning for the PHP2Shell vulnerability The PHP2Shell exploit hit Cloudflare hard Ryan Austin discovered PHP2Shell vulnerabilities (CVE‑2026‑109618 & CVE‑2026‑109619) GoDaddy WARNED PHP Steal My Bitcoin site is testing the PHP2Shell vulnerability.· Entity summary generated by Graphiti
Relation timeline
BY VALID-FROM DATE- Steal My Bitcoin siteTESTINGPHP2Shell
Steal My Bitcoin site is testing the PHP2Shell vulnerability.
- PHPHAS VULNERABILITYPHP2Shell
PHP has the vulnerability 'php2shell'
- JapanCONFIRMED NO ATTACKSPHP2Shell
Japan confirmed no attacks exploiting PHP2Shell
- BSIHAD NO SUCCESSFUL USEPHP2Shell
BSI had no successful use of PHP2Shell
- OpenAICOMMENTED ONPHP2Shell
OpenAI commented on the PHP2Shell vulnerability
- White HouseCOMMENTED ONPHP2Shell
White House commented on the PHP2Shell vulnerability
- UK National Cyber Security CentreISSUED WARNING FORPHP2Shell
UK’s National Cyber Security Centre issued a warning for the PHP2Shell vulnerability
- PHP2ShellDISCOVERED BYWiz
PHP2Shell vulnerability was discovered by Wiz
- PHP2ShellHITCloudflare
The PHP2Shell exploit hit Cloudflare hard
- Ryan AustinDISCOVEREDPHP2Shell
Ryan Austin discovered PHP2Shell vulnerability
- WizDISCOVEREDPHP2Shell
Wiz discovered PHP2Shell vulnerability
- PHP2ShellCAN EXPOSE RCE INNewsmax
PHP2Shell vulnerability can expose RCE in Drupal
- PHP2ShellCAN EXPOSE RCE INNews/Media Alliance
PHP2Shell vulnerability can expose RCE in Joomla
- TechRadarWORKED ONPHP2Shell
Eric Wallace worked on patching PHP2Shell vulnerability
- PHP2ShellAFFECTSPHP
PHP2Shell vulnerability affects PHP core
- Ryan AustinDISCOVEREDPHP2Shell
Ryan Austin discovered PHP2Shell vulnerabilities (CVE‑2026‑109618 & CVE‑2026‑109619)
- PHP2ShellCAN EXPOSE RCE INWordPress
PHP2Shell vulnerability can expose RCE in WordPress
- NetherlandsAFFECTED BYPHP2Shell
Netherlands pulled its government websites offline due to PHP2Shell
- WizFOUND BOTH FLAVORS OFPHP2Shell
Wiz independently found both flaws of PHP2Shell
- OpenAIFOUND FULLER VERSION OFPHP2Shell
OpenAI’s own team found a fuller version of PHP2Shell in September
- FinlandAFFECTED BYPHP2Shell
Finland pulled its government websites offline due to PHP2Shell
- OpenAILEADS COALITION TO FIXPHP2Shell
OpenAI led a two‑month coalition to fix PHP2Shell
- GPT-5.6 SolIDENTIFIEDPHP2Shell
GPT‑5.6 Sol identified PHP2Shell
- CalifUSED GPT 5 6 SOL TO FINDPHP2Shell
security firm Calif used GPT‑5.6 Sol to find a version of PHP2Shell in August
- FranceAFFECTED BYPHP2Shell
France pulled its government websites offline due to PHP2Shell
- PHP2ShellWARNEDPHP
GoDaddy WARNED PHP
- BeInCryptoPUBLISHEDPHP2Shell
BeInCrypto published the article about PHP2Shell
- PHP2ShellINCLUDES VULNERABILITYCVE-2026-109619
PHP2Shell includes vulnerability CVE-2026-109619
- CloudflareATTACKED BYPHP2Shell
Cloudflare was a target of attack attempts exploiting PHP2Shell
- Wiz ResearchREPORTS ONPHP2Shell
Wiz Research reported that successful attacks on PHP2Shell could expose passwords and other sensitive information
- PHP2ShellINCLUDES VULNERABILITYCVE-2026-109618
PHP2Shell includes vulnerability CVE-2026-109618
- CVE-2026-109618RELATED TOPHP2Shell
CVE-2026-109618 is related to PHP2Shell
- PHPSHIPPED FIX FORPHP2Shell
PHP shipped its fix for PHP2Shell
- AmazonLOGGED EXPLOIT ATTEMPT FORPHP2Shell
Amazon logged a PHP2Shell exploitation attempt on 2026-10-17
- Wiz ResearchCONFIRMED RCE AGAINSTPHP2Shell
Wiz Research confirmed an unauthenticated remote code execution against Drupal
- PHP FoundationWARNED ABOUTPHP2Shell
PHP Foundation warned about php2shell
- PHP 8.x lineHELPED UNEARTHENPHP2Shell
Wiz (cyber‑security firm) helped uncover php2shell
Relations are facts Graphiti extracted from reports, not verbatim quotes. An end date means later reporting showed the relation no longer holds.
Events 6
- UK to invest £100m in 'world first' AI Biosecurity Lab1 cited report · 2026-10-24
- Is the Internet Safe Again After the PHP Nightmare? What You Need to Know1 cited report · 2026-10-23
- Race to update services' computer systems after cyber-security flaw found1 cited report · 2026-10-23
- Hackers got a four-day head start on epic PHP2Shell vulnerability1 cited report · 2026-10-22
- [AINews] OpenAI’s Patch the Planet program is 1 of 2 parties to discover PHP2Shell vulnerabilities in core PHP affecting 70% of the web, using GPT-5.6 Sol; coordinated response over 2 months4 cited reports · 2026-10-22
- Who Found the PHP Bug That Made Governments Unplug Their Websites? ChatGPT, Of Course1 cited report · 2026-10-22
Source reports 11
- AI agents help rescue ETH’s Glamsterdam fork, ‘Steal My Bitcoin’ site: Hodler’s DigestCointelegraph · 2026-10-26
- UK to invest £100m in 'world first' AI Biosecurity LabBBC Politics · 2026-10-24
- Is the Internet Safe Again After the PHP Nightmare? What You Need to KnowDecrypt · 2026-10-23
- Race to update services' computer systems after cyber-security flaw foundBBC World · 2026-10-23
- Hackers got a four-day head start on epic PHP2Shell vulnerabilityArs Technica · AI · 2026-10-22
- PHP: The three little letters wreaking havoc across the webThe Verge · AI · 2026-10-22
- [AINews] OpenAI’s Patch the Planet program is 1 of 2 parties to discover PHP2Shell vulnerabilities in core PHP affecting 70% of the web, using GPT-5.6 Sol; coordinated response over 2 monthsLatent Space · 2026-10-22
- Crypto Exchange Warning: Critical PHP Flaw Puts Payment Sites at RiskBeInCrypto · 2026-10-22
- Who Found the PHP Bug That Made Governments Unplug Their Websites? ChatGPT, Of CourseDecrypt · 2026-10-22
- Today's PHP Security Release, and How We're Strengthening PHP SecuritySimon Willison · 2026-10-22
- PHP Panic: Two Critical Bugs Put 70% of the Internet at Risk, and Everyone Is Freaking OutDecrypt · 2026-10-21