🚨 UPDATE: PHP 8.5.12 may still be vulnerable to php2shell!

Repartage — contenu de Syhunt

🚨 UPDATE: PHP 8.5.12 may still be vulnerable to php2shell!

Researchers are reporting a successful double-free trigger on the newly patched release.

⚠️ The official fixes may be incomplete. A crash alone doesn't confirm RCE, but this deserves urgent investigation.

Don't assume you're safe just because you've patched.

More details at: https://lnkd.in/e3MTbU49

#php #cybersecurity #php2shell

GitHub – syhunt/php2shell-protection: Emergency Apache mitigation and testing toolkit for php2shell (CVE-2026-109618 / CVE-2026-109619), featuring multipart POST blocking, request-size limits, and additional hardening measures.GitHub – syhunt/php2shell-protection: Emergency Apache mitigation and testing toolkit for php2shell (CVE-2026-109618 / CVE-2026-109619), featuring multipart POST blocking, request-size limits, and additional hardening measures.

github.com

15

4

15 reactions

Sources LinkedIn

• Profil : Pierre Jean Duvivier dit Sage (LinkedIn)
• Auteur partagé : Syhunt (LinkedIn)