PHP2Shell: Critical PHP Vulnerabilities | Censys ARC Flash

Two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619 (both CVSS 9.2), have put Internet-facing PHP infrastructure at risk of unauthenticated remote code execution. In this special Rapid Response edition of Censys ARC Flash, Silas Cutler, Martijn Grooten, Fawna Tucker, and Lisa Mauck discuss what we know about PHP2Shell, what Censys is observing across the global Internet, and how security teams can identify potentially affected systems. In this episode: What we know What we're seeing: Internet exposure, patching, and why organizations are taking affected systems offline How to hunt with Censys: A live demonstration of searching for PHP hosts and web properties, identifying reported versions, and using tags and collections to monitor assets *PHP2Shell Dashboard Exposure Tracker & Other Resources* Track the global response to PHP2Shell: https://php2shell.censys.com/ *Censys ARC Advisory* Read the technical analysis: https://censys.com/advisory/cve-2026-... Subscribe for more Censys ARC Flash episodes covering emerging vulnerabilities, Internet intelligence, and practical threat hunting.