I Built an Emergency Toolkit for PHP2Shell RCE (CVE-2026-109618) - From Pakistan

Описание и применение

Создан набор инструментов для быстрого обнаружения и устранения уязвимости PHP2Shell (CVE-2026-109618) в средах shared hosting, позволяющий без прав root применять патчи через .htaccess или php.ini.

Задача

A critical PHP vulnerability (PHP2Shell, CVE-2026-109618) allows remote code execution via malicious EXIF headers, leaving many shared hosting servers in Pakistan unpatched.

Результат

The toolkit successfully scans for PHP2Shell vulnerabilities and applies an immediate mitigation patch, protecting shared hosting servers from RCE without requiring root access.

Рабочий процесс

• Clone the toolkit repository: git clone https://github.com/farimazhar/php2shell-fix-toolkit
• Navigate into the directory: cd php2shell-fix-toolkit
• Run the scanner against the web root: ./scan.sh /var/www/html
• Apply the mitigation: ./fix.sh --apply

Доказательства

When I saw a new critical PHP vulnerability PHP2Shell (CVE-2026-109618) with CVSS 10.0 allowing RCE via EXIF headers, I knew many shared hosting servers in Pakistan would remain unpatched.

Источник

Non-destructive scanner for php2shell

Источник

Instant mitigation (.htaccess / http://php.ini patch)

Источник

Works on cPanel / Shared Hosting with no root needed

Источник