PHP2Shell Update: One in ten organizations impacted as Europe bears the brunt

Check Point Research reports that 10% of organizations worldwide have been impacted by exploitation attempts against two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, collectively known as PHP2Shell, after details leaked ahead of planned disclosure. Attack activity peaks hourly at midnight, when fewer security teams are watching, and government institutions in the Netherlands and Finland have taken some websites offline as a precaution. Check Point notes that "impacted" means exploitation attempts were observed, with no way to know whether the attacks succeeded.

Two critical vulnerabilities in PHP, the programming language behind a large share of the world’s websites, online stores and internet services, are being actively targeted. Since details of CVE-2026-109618 and CVE-2026-109619, known as PHP2Shell, leaked ahead of planned disclosure, 10% of organisations worldwide have been impacted “impacted” means exploitation attempts, we have no way of knowing if the attack has been successful , according to Check Point Research. Hourly activity peaks at midnight, when fewer security teams are watching. Government institutions in the Netherlands and Finland have taken some of their websites offline as a precaution. What PHP2Shell is and why … The post PHP2Shell Update: One in ten organizations impacted as Europe bears the brunt https://blog.checkpoint.com/ai-security/php2shell-one-in-ten-organizations-impacted-as-europe-bears-the-brunt/ appeared first on Check Point Blog https://blog.checkpoint.com .