PHP2Shell Vulnerability: CVE-2026-109618 & CVE-2026-109619 Analysis & PoC

Описание: In this technical security breakdown, we analyze the critical PHP2Shell vulnerabilities tracked under CVE-2026-109618 and CVE-2026-109619. We explore the architectural flaws causing heap memory corruption via out-of-memory manipulation and demonstrate how network administrators can safely audit their environments using a custom Nmap Scripting Engine (NSE) script.

🚀 Timestamps:
0:00 - Introduction to PHP2Shell
0:10 - Demo Lab Setup
1:02 - PHP2Shell Detection via Custom Nmap Script
1:40 - PHP2Shell Detection via Custom Nuclei Template
3:02 - Vulnerability PoC as RCE
4:46 - Fix/Remediation

🛡️ Reference:
https://github.com/ikow/php2shell-poc
https://github.com/Ademking/php2shell...

⚠️ Patch Information:
To completely mitigate this vulnerability, ensure your PHP interpreter is updated to the following patched versions or higher:
PHP 8.2.36+
PHP 8.3.36+
PHP 8.4.27+
PHP 8.5.12+

---------------------------------------------------------------------------------------------------------
⚠️ EDUCATIONAL DISCLAIMER & POLICY COMPLIANCE:
This video and its contents are strictly intended for educational, research, and defensive security engineering purposes. The demonstrations shown here were executed within a controlled local loopback environment (127.0.0.1) on infrastructure owned by the creator. We do not support, condone, or encourage unauthorized scanning, exploitation, or destructive actions against remote computer systems. All code shared is exclusively for defensive configuration auditing and vulnerability management.
---------------------------------------------------------------------------------------------------------

#Cybersecurity #infosec #vulnerabilitymanagement #Nmap #PHP2Shell #sysadmin #ethicalhacking #CVE #offensivesecurity