PHP2Shell Probes Surge as Botnet Operators Test Critical PHP Flaws

Mass probing is targeting PHP2Shell flaws CVE-2026-109618 and CVE-2026-109619, with attempts to deliver a Mirai-derived botnet but no confirmed in-the-wild compromise yet. Patch supported PHP branches immediately and obtain vendor backports or migrate unsupported versions.