News

Real Problem

I have documented with the help of AI, and this is what I managed to come up with.

It’s about some critical vulnerabilities PHP2Shell (CVE-2026-109618 and CVE-2026-109619), which allow PHP memory exploitation, and execute remote code (RCE) without authentication.

This is done by POST requests, which inject malicious code, which through heap corruption tricks memory pointers into accepting the payload instead of real files. Once the payload bypasses this threshold, instructions are fed to the processor for execution. And then PHP files are installed which act as backdoors, through which the hacker can login later using these endpoints.

PHP is written in C and uses the Zend Engine to manage pointers, which in the end executes php scripts.…