Security1 hOctober 29, 2026, 02:46

OffSec launches free PHP2Shell lab for critical PHP flaws

OffSec has released a free interactive lab in Proving Grounds Play to study the critical PHP2Shell vulnerabilities CVE-2026-109618 and CVE-2026-109619. The decade-old memory corruption flaws in PHP score 9.2 out of 10 and are already in CISA's Known Exploited Vulnerabilities catalog.

Techbullion

Open source

OffSec launches free PHP2Shell lab for critical PHP flaws

CVE-2026-109618 and CVE-2026-109619 are rated 9.2 out of 10
CISA added both flaws to its KEV catalog on Oct. 26
Fixes ship in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35
The lab is free and available in Proving Grounds Play

#PHP#OffSec#Wiz#CISA

PHP2Shell: two critical PHP flaws allow unauthenticated RCE

Security

Wiz CTO on PHP2Shell bugs and the coming 'vulnpocalypse'

Security

OpenAI proposes five-stage response plan for critical vulnerabilities

Security

OffSec launches free PHP2Shell lab for critical PHP flaws

PHP2Shell: two critical PHP flaws allow unauthenticated RCE

Wiz CTO on PHP2Shell bugs and the coming 'vulnpocalypse'

OpenAI proposes five-stage response plan for critical vulnerabilities

Researchers: PHP2Shell patching lags, 93.6% of servers still exposed