Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed

[Starburst-David]

Amazon's Threat Intelligence team on Wednesday said it detected an attempt to exploit the newly disclosed PHP2Shell vulnerabilities dating back to October 17, 2026, against its MadPot honeypot service, as the flaws come under broad exploitation in the wild following the release of the patches.

"The exploit attempt originated from an IP address associated with a commercial anonymization network," CJ Moses, CISO of Amazon Integrated Security, said in a post shared with The Hacker News.

More Information:
https://thehackernews.com/2026/10/someo ... ell-4.html

Published Date: Oct 22, 2026

Vulnerabilities has been mentioned in this article:
CVE-2026-109619 CVE-2026-109618