PHP2Shell: What We Know, What's Exposed, and What's Next

Critical PHP vulnerabilities are putting millions of internet-facing services at risk, with government agencies across Europe taking websites offline as a precaution.

Join the Censys ARC team for a special live ARC Flash webcast examining PHP2Shell (CVE-2026-109618 and CVE-2026-109619), the latest developments, and what defenders need to know.


What we'll cover:

The Latest Developments: What happened, what we know so far, and the scope of potential exposure.

Patching Progress: Available fixes, remediation activity, and challenges for organizations running older PHP versions.

Public Exploits: The current state of publicly available proof-of-concept (PoC) exploits.

Exploitation in the Wild: What researchers are hearing and observing about potential exploitation activity.

Live Q&A: Get your questions answered by the Censys ARC team.

Can't attend live? Register to receive the recording.

Register for the Live Briefing

Friday, October 23, 2026 | 11:00 AM ET

Trusted by Security Teams Worldwide Industries, Governments, & Security Companies Rely on Censys