Last week, we published a report describing two major vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619). Since then, alongside much of the security industry, the Wiz Research team has been monitoring for related activity in the wild and reviewing publicly available exploit code. So far, we have observed a limited number of exploitation attempts in our telemetry and have not identified a publicly available proof of concept (PoC) demonstrating complete, general end-to-end exploitation against an arbitrary target. Some partners have, however, privately disclosed to us exploits that work against a variety of targets and we continue to experiment internally. Videos demonstrating our successful exploitations are available at php2shell.com.
Wiz: No successful PHP2Shell exploits seen so far; exposure down 67%
Wiz research has been monitoring PHP2Shell exploitation attempts, but none have succeeded so far. We examine the techniques used, what prevented the attacks from completing and how observed exposure has changed since disclosure.
HN Hacker News 
Key takeaways
Wiz reports no successful PHP2Shell exploits so far, with exposure down 67% since the vulnerability was disclosed.
- No public proof of concept for complete exploitation has been found.
- Exposure of vulnerable machines dropped by 67% after disclosure.
- Organizations reduced their exposure by 47.9% in five days.
Summarised automatically by AI from the original article by Hacker News. AI can make mistakes, so check the original for details.
Read the full story on Hacker News That's the opening of the story. The full piece is published by Hacker News.
Continue reading ↗ Story details
- Published
- By
- acossta
- Format
- Article
- Original
- wiz.io ↗
Topics
