Low Severity
CVE-2026-109619
Published: Oct 26, 2026
Curated IoCs, detection engineering rules, and automated threat intel feeds for PHP2Shell (CVE-2026-109618 & CVE-2026-109619).
<a id="readme-top"></a>
<!-- PROJECT SHIELDS -->
<div align="center">
[](https://github.com/naravid19/php2shell-ioc/actions/workflows/lint-and-test.yml)
[](https://github.com/naravid19/php2shell-ioc/actions/workflows/update-iocs.yml)
[](iocs/php2shell_iocs.csv)
[](docs/threat_overview.md)
[](docs/threat_overview.md)
[](LICENSE)
</div>
<!-- PROJECT LOGO & HEADER -->
<div align="center">
<br />
<h1 align="center">PHP2Shell Indicators of Compromise (IoC)</h1>
<p align="center">
<strong>Curated threat intelligence feeds, high-fidelity blocklists, and detection engineering artifacts for PHP zero-day vulnerabilities (CVE-2026-109618 & CVE-2026-109619).</strong>
<br />
<br />
<a href="#-quick-feeds-for-defenders"><strong>Consume Feeds »</strong></a>
·
<a href="docs/threat_overview.md"><strong>Threat Overview</strong></a>
·
<a href="docs/detection_and_hunting.md"><strong>Detection Rules</strong></a>
·
<a href="docs/ioc_guide.md"><strong>Defender Guide</strong></a>
·
<a href="https://github.com/naravid19/php2shell-ioc/issues/new?labels=needs-triage&template=ioc