RepoAlerts
SponsorGet alerts

NCSC-NL/php2shell

Resource

Get alerts like thisView on GitHubShare on X

Can I trust it?

Worth a closer look before you use it.

  • Warnings Check

    Very new: it was created yesterday. Wait a little before installing it.

  • Stars from real accounts No data

    We haven't checked its stars for fakes yet.

  • Active OK

    Last change today.

  • Licence Check

    EUPL-1.2: free to use. If you distribute software that includes it, you must publish your code under the same licence.

Quick checks from public data. They help, but they are no guarantee.

What it is

Operational information on two critical PHP remote code execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619, including affected contexts, fixed PHP versions, temporary mitigations and links to advisories. It also holds inventories of software with a PHP dependency…

Who it's for

System administrators, security teams and developers responsible for PHP-based web applications and products that embed PHP

How to use it

Ask your AI to set it up

Paste this into Claude, ChatGPT or your coding assistant.

Help me install and set up NCSC-NL/php2shell in my project. Follow its README: https://github.com/NCSC-NL/php2shell. Explain each step and check it is safe before running anything.

Read the README

Star curve

164From 102 to 164 stars between 21 Oct 2026 and 22 Oct 2026.

On the radar

22 Oct 2026: #52
Best place #52, on 22 Oct 2026. In the top 100 on 1 of the last 5 days.

Its place among the radar's top 100, day by day, with #1 at the top. Gaps are days it was out of the top 100.

Records

  • Best place on RepoAlerts: #52, on 22 Oct 2026

Get alerts for repos like this

We'll email you when repos like this start rising. Free, once a week, only what matches.

18,966 GitHub repos watched and ranked every hour. Figures as of 22 October 2026.

What arrives: one email on Mondays with the repos that match, never more. See last week's. Privacy

For maintainers

Add this badge to your README. It shows the repo's place on the radar, updates every hour and links back to this page.

[![NCSC-NL/php2shell on RepoAlerts](https://repoalerts.com/badge/NCSC-NL/php2shell.svg)](https://repoalerts.com/repo/NCSC-NL/php2shell?ref=badge)
Share on X
  • eness/php2shell-CVE-2026-109618-CVE-2026-109619-PoC

    Proof-of-concept exploit for two PHP core vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that allow remote code execution in vulnerable PHP environments. Includes a README with affected version

    Shell · 785 stars · +785 this week · 1 day old

  • dinosn/php-cve-2026-10961x-lab-poc

    Lab reproduction and vulnerability-research package for PHP 8.5.11 CVE-2026-109618 and CVE-2026-109619, a remote code execution chain using memory disclosure via session cookies and a use-after-free.

    Python · 79 stars · +79 this week · 2 days old

  • openai/php2shell-checker

    A checker that tells whether a website's PHP version, read from HTTP response headers, or a local PHP binary, read via php -v, is vulnerable to php2shell. Results are OK, VULNERABLE or UNKNOWN, with a

    CLI toolJavaScript · 674 stars · +674 this week · 1 day old

  • JoasASantos/php2shell-scanner

    Python scanner that checks targets for PHP core RCE CVE-2026-109618 and CVE-2026-109619 without exploiting them. It enumerates subdomains via crt.sh and subfinder, grabs HTTP banners, and infers vulne

    CLI toolPython · 84 stars · +84 this week · 1 day old

  • ikow/php2shell-poc

    Research toolkit for two PHP pre-auth RCE vulnerabilities (CVE-2026-109618/109619) abusing session.upload_progress. Includes five chain descriptions, three exploit scripts, detection rules for Suricat

    Python · 1,351 stars · +1,351 this week · 1 day old

  • syrex1013/php2shell

    Proof-of-concept exploit and lab for CVE-2026-109618 and CVE-2026-109619, a heap use-after-free in PHP's session.upload_progress handling. Includes a Docker lab reproducing the stale-pointer write on

    Python · 81 stars · +81 this week · 1 day old