Threat intelligence
Advisories from Panop Research on critical vulnerabilities and active threats: what is affected, who is exposed, and what to do first.
- Published by
- Panop Research
- Latest
- Questions
- contact@panop.io
- Vulnerability advisory
PHP2Shell: Unauthenticated RCE in PHP (CVE-2026-109618, CVE-2026-109619)
CVE-2026-109618 · CVE-2026-109619
Two critical PHP engine flaws allow unauthenticated remote code execution on unpatched web servers, mod_php first. What is affected and what to do today.
Severity: Critical
About Panop Research
Panop Research is the security research function of Panop SA, a Swiss exposure management company founded in July 2024 by three practitioners with nearly twenty years each inside large international organisations. It publishes analysis built on primary public datasets, with every figure attributed and linked to the publisher that produced it.
Need to know where an advisory lands in your estate? Request a scan