PHP2Shell Vulnerabilities Exploited in Failed Mirai Botnet Campaigns

Threat actors are attempting to exploit newly disclosed PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) to deploy the Potassium Mirai botnet variant, though these efforts have been largely unsuccessful. The vulnerabilities carry high CVSS scores (9.2), indicating critical severity, but attackers face challenges in weaponizing them effectively.

Threat actors have been observed unsuccessfully attempting to exploit the newly disclosed PHP2Shell vulnerabilities to rope infected systems into a Mirai botnet variant called Potassium, as it emerges that weaponizing the flaws may be harder than previously thought.

The attacks aim to exploit CVE-2026-109618 and CVE-2026-109619 (CVSS scores: 9.2), which can result in unauthenticated remote

Read original article