AWS Blog company blog

Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure

Amazon Threat Intelligence identified a PHP2Shell exploitation attempt dating to Oct. 17, 2026, in MadPot telemetry, four days before public disclosure of CVE-2026-109618 and CVE-2026-109619. The exploit attempt originated from an IP address associated with a commercial anonymization network. While the vulnerability…
Points
270
HN comments
99
Submissions
1
Cited by
3 commenters

Security & Privacy2026

On Hacker News

SubmittedTitle on HNPointsComments
Oct 22, 2026Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure by cubefox27099

Cited in comments

Linked from 3 Hacker News comments by 3 different people, from Oct 2026 to Oct 2026.

Most recent:

Search every comment that links here →

More from AWS Blog

All 246 posts →

Related posts from the same era