In the Wild with VulnCheck

#1758719: In the Wild with VulnCheck - Oct 28th, 2026

Description:	On October 21, PHP disclosed and patched two critical, unauthenticated RCE vulnerabilities. Within hours, VulnCheck researchers reproduced both and built a working RCE exploit. We don’t know of any other public or commercial exploit that covers multiple versions under realistic configurations. In this episode, we'll cover: The vulnerabilities: how CVE-2026-109618 and CVE-2026-109619 work, and what makes a system exploitable The exploit race: hundreds of PoCs appeared, but very few work Exposure at scale: 2.6M+ internet-facing PHP hosts, 1.1M+ of them on end-of-life versions with no official fix In the wild: scanning and an attempted web shell drop, as seen by VulnCheck Canaries What to do now: patches, mitigations and IOCs Is PHP2Shell the next Log4Shell, or will real-world configurations limit the damage? Join us to find out. About In the Wild with VulnCheck In the Wild with VulnCheck is a monthly, research-driven webinar focused on how vulnerabilities, exploits, and attacker tradecraft are actually showing up in real environments. Each session cuts through the hype to examine what's being exploited, how attackers are operating, and what security teams should be paying attention to right now, drawing on VulnCheck research, exploitation intelligence, and live detections to blend hands-on technical insight with practical analysis for practitioners, exploit developers, and security researchers. Expect candid discussions, deep dives into active exploitation, and guest perspectives from VulnCheck researchers and industry peers, grounded in evidence, not speculation. Register once and you're registered for the entire series. Come as you're available. Recordings will be distributed after the event.
More info:	https://wwv.vulncheck.com/in-the-wild-with-vulncheck-webinar-series?utm_campaign=56940703-RESEARCH%202026-10-22%20PHP2Shell&utm_medium=email&_hsenc=p2ANqtz-_1NOQNhIEIuMEuNEX9j10DBmEq7IiueK7MUFe8Ocb4J7iKsClOdybC0H9Coe_VTjYrN__xf7_WDCuf0vZMx65Q8g8ZQk3pdCA7T4kLrMIODb3qpRU&_hsmi=445627712&utm_content=445627712&utm_source=hs_email

Description:

On October 21, PHP disclosed and patched two critical, unauthenticated RCE vulnerabilities. Within hours, VulnCheck researchers reproduced both and built a working RCE exploit. We don’t know of any other public or commercial exploit that covers multiple versions under realistic configurations.

In this episode, we'll cover:

The vulnerabilities: how CVE-2026-109618 and CVE-2026-109619 work, and what makes a system exploitable
The exploit race: hundreds of PoCs appeared, but very few work
Exposure at scale: 2.6M+ internet-facing PHP hosts, 1.1M+ of them on end-of-life versions with no official fix
In the wild: scanning and an attempted web shell drop, as seen by VulnCheck Canaries
What to do now: patches, mitigations and IOCs
Is PHP2Shell the next Log4Shell, or will real-world configurations limit the damage? Join us to find out.

About In the Wild with VulnCheck

In the Wild with VulnCheck is a monthly, research-driven webinar focused on how vulnerabilities, exploits, and attacker tradecraft are actually showing up in real environments.

Each session cuts through the hype to examine what's being exploited, how attackers are operating, and what security teams should be paying attention to right now, drawing on VulnCheck research, exploitation intelligence, and live detections to blend hands-on technical insight with practical analysis for practitioners, exploit developers, and security researchers.

Expect candid discussions, deep dives into active exploitation, and guest perspectives from VulnCheck researchers and industry peers, grounded in evidence, not speculation. Register once and you're registered for the entire series. Come as you're available. Recordings will be distributed after the event.

More info:

https://wwv.vulncheck.com/in-the-wild-with-vulncheck-webinar-series?utm_campaign=56940703-RESEARCH%202026-10-22%20PHP2Shell&utm_medium=email&_hsenc=p2ANqtz-_1NOQNhIEIuMEuNEX9j10DBmEq7IiueK7MUFe8Ocb4J7iKsClOdybC0H9Coe_VTjYrN__xf7_WDCuf0vZMx65Q8g8ZQk3pdCA7T4kLrMIODb3qpRU&_hsmi=445627712&utm_content=445627712&utm_source=hs_email

Date added	Oct. 23, 2026, 10:54 a.m.
Source	vulncheck
Subjects	CVE-2026 Information on New Exploits PHP - Also PHP2Shell Bug PodCasts / Webcast / Webinar / eSummit / Virtual Event etc.
Venue	Oct. 28, 2026, midnight - Oct. 28, 2026, midnight
CVE	CVE-2026-109618 CVE-2026-109619