PHP2Shell : See if you’re affected with a free external attack surface scan. Click Here > 

THE IONIX BLOG

October 21, 2026

php2shell (CVE-2026-109618 & CVE-2026-109619) and how IONIX is helping you respond

Last updated: 23 Oct 2026, 14:36 UTC. This page is updated as the situation develops. TL;DR What is happening Two critical vulnerabilities in PHP, the language behind a large share of the web, were disclosed ahead of their fix. Nicknamed “php2shell,” they are rated Critical (CVSS 9.2) and could let a remote attacker run code…
Read more

EDITORS PICKS

Tal Zamir
October 13, 2026

The Quiet Takeover: How Your Forgotten Cloud Resources End Up Selling Slot Machines

Devaney Devoe
August 17, 2026

NEW! WAF Posture Management: Building Stronger WAF Programs for the Mythos Era

Marc Gaffan
May 31, 2026

IONIX Live Exposure Defense (LED) Has Shipped: Defenders Now Move at Machine Speed

Billy Hoffman
April 20, 2026

Tired of hearing about Mythos? Your Board isn’t.

Marc Gaffan
April 13, 2026

Are You Ready for the CVE Avalanche?

THE LATEST FROM IONIX >>

LATEST

  • company
    Tal Zamir
    October 21, 2026

    php2shell (CVE-2026-109618 & CVE-2026-109619) and how IONIX is helping you respond

  • The Quiet Takeover: 
How Your Forgotten Cloud Resources End Up Selling Slot Machines
    Tal Zamir
    October 13, 2026

    The Quiet Takeover: How Your Forgotten Cloud Resources End Up Selling Slot Machines

  • NEW! WAF Posture Management: Building Stronger WAF Programs for the Mythos Era
    Devaney Devoe
    August 17, 2026

    NEW! WAF Posture Management: Building Stronger WAF Programs for the Mythos Era

  • Arthur Vinberg
    August 13, 2026

    We built an AI PR reviewer. The hard part was teaching it to say nothing.

  • Marc Gaffan
    May 31, 2026

    IONIX Live Exposure Defense (LED) Has Shipped: Defenders Now Move at Machine Speed

  • Billy Hoffman
    April 20, 2026

    Tired of hearing about Mythos? Your Board isn’t.

  • Marc Gaffan
    April 13, 2026

    Are You Ready for the CVE Avalanche?

  • Matt MacKinnon
    February 17, 2026

    Dangling DNS in the AI Era: The Silent Attack Surface Expanding Beneath Your Feet

  • Marc Gaffan
    February 2, 2026

    Deep Active Browser-Based Crawling: A Must-Have in Determining External Exposure

  • Marc Gaffan
    January 6, 2026

    The Need for Speed in Exposure Validation

  • Tal Zamir
    December 25, 2025

    CVE-2025-68613: Critical RCE in n8n via expression injection

  • Zach Bistra
    November 26, 2025

    CVE-2025-61757: Critical Pre-Auth RCE in Oracle Identity Manager