0x4148/CVE-2026-109618-php2shell-lab

PoC

PHP2Shell (CVE-2026-109618 / CVE-2026-109619) Docker lab and PoC. Use-After-Free in PHP's session.upload_progress.

view exploit source poc_in_githubauthor 0x4148published 2026-10-21catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-109618US	critical9.8	11.6% (96th)	Exploit	2026-10-21
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.