PHP2Shell Critical RCE Vulnerabilities CVE-2026-109618 and CVE-2026-109619
Critical remote code execution vulnerabilities in PHP core sessions have leaked ahead of scheduled patching, affecting versions 5 through 8.

Browse public community intelligence reports, source analysis, and threat research.
3 intel reports
ToxNetV2 is an AArch64 Linux P2P botnet that integrates NVIDIA NIM LLM services into its controller's decision-making loop to propose operational actions.
The Evooo1Bot and GorillaBot threat actors are deploying highly modular Mirai-based malware targeting Linux systems and IoT devices to execute large-scale DDoS attacks and establish persistent proxy relays.
Evooo1Bot is a highly modular Linux botnet leveraging Mirai's DDoS engine alongside advanced SOCKS relay, SSH brute-forcing, and an extensive CVE exploit arsenal to compromise Internet-facing edge devices.