US CISA Adds PHP2Shell Flaws to KEV Catalog and Mandates Federal Patching
The US CISA added CVE-2026-109618 and CVE-2026-109619 (known as PHP2Shell) to its Known Exploited Vulnerabilities catalog on October 26 following evidence of active exploitation, setting an October 29 patch deadline for federal agencies.
Following reports of active exploitation, the US Cybersecurity and Infrastructure Security Agency (CISA) added two PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619 (collectively known as PHP2Shell), to its Known Exploited Vulnerabilities (KEV) catalog on October 26. CISA mandated that federal agencies complete remediation by October 29, and released Sigma detection rules to assist users in identifying suspicious system activity.
Key takeaways
- CISA listed the two PHP2Shell vulnerabilities in its KEV catalog on October 26, mandating federal agency remediation by October 29.
- CISA provided cross-platform Sigma detection rules to assist all PHP users in spotting potential system exploitation.
Source：iThome Read the original ↗
Prepared, checked and automatically published by AI; not individually reviewed by a human. Translation checked by AI.