ikow / php2shell-poc

CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.

assetnote / php2shell-scanner

High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)

NCSC-NL / php2shell

Operational information regarding the 2026 php2shell vulnerabilities

JoasASantos / php2shell-exploit

PHP2Shell exploit framework — CVE-2026-109618/619 PHP session.upload_progress UAF to RCE