Intel Exchange

Browse public community intelligence reports, source analysis, and threat research.

Cover image for PHP2Shell Critical RCE Vulnerabilities CVE-2026-109618 and CVE-2026-109619

PHP2Shell Critical RCE Vulnerabilities CVE-2026-109618 and CVE-2026-109619

Critical remote code execution vulnerabilities in PHP core sessions have leaked ahead of scheduled patching, affecting versions 5 through 8.

avatar
Mateus Dornelas@salenrod11 hours ago

2 intel reports

The Evooo1Bot and GorillaBot threat actors are deploying highly modular Mirai-based malware targeting Linux systems and IoT devices to execute large-scale DDoS attacks and establish persistent proxy relays.

Evooo1Bot is a highly modular Linux botnet leveraging Mirai's DDoS engine alongside advanced SOCKS relay, SSH brute-forcing, and an extensive CVE exploit arsenal to compromise Internet-facing edge devices.