Vuln: CVE-2026-109618 | Detection.FYI

Potential PHP2Shell Exploitation Attempt

Oct 23, 2026 · Domain: Web Use Case: Threat Detection Use Case: Vulnerability Tactic: Initial Access Data Source: Nginx Data Source: Apache Data Source: Apache Tomcat Resources: Investigation Guide Threat: Vulnerability Exploit Rule Type: Query Service: Nginx Service: Apache Tomcat Service: Apache HTTP Server Vuln: CVE-2026-109618 Vuln: CVE-2026-109619 ·
Share on:

This rule detects a distinctive PHP out-of-memory fatal error associated with PHP2Shell exploitation attempts. The combination of an allowed-memory-size exhaustion and the location "Unknown on line 0" is produced before normal application execution and is an indicator of attempts to exploit PHP memory-safety vulnerabilities, including CVE-2026-109618 and CVE-2026-109619. The rule can detect unsuccessful as well as successful attempts and does not, by itself, confirm remote code execution.

Read More