As promised, we've updated our #PHP2Shell story with detailed observable indicators. These are based on a broad review of working proofs-of-concept, and should yield high-fidelity hunts and detections. They've also been added to our MISP feed. https://ifin.network/t/cve-2026-109618-cve-2026-109619-remote-code-execution-in-php/914 #ThreatIntel