l3tchupkt/php2shell
Exploit tooling and vulnerability research for CVE-2026-109618 and CVE-2026-109619 — two critical unauthenticated remote code execution (RCE) vulnerabilities patched in PHP 8.4.27, 8.3.36, 8.2.35, and 8.5.12 (released October 21, 2026).
GitHub repository with 16 stars and 5 forks.
Language: Python
Topics: cve, cve-2026-109618, cve-2026-109619, exploit, letchupkt, php, php2shell