NCSC-NL/php2shell

选用指南

AI 根据 README 整理 · 2026/10/22 01:36:07

适用场景

适用于需要了解PHP漏洞影响范围、获取检测与缓解材料、查看受影响软件清单的安全运维场景。

查看 README 依据

# php2shell vulnerabilities (CVE-2026-109618, CVE-2026-109619) Last updated: 21 October 2026 16:00 TLP:CLEAR This repository contains operational information regarding the critical PHP vulnerabilities tracked by CERT-EU as CVE-2026-109618 and CVE-2026-109619. PHP is a widely used open-source server-side scripting language, so these vulnerabilities may affect a broad range of internet-facing web applications and products that embed or depend on PHP. ## Current status

- [CERT-EU Security Advisory 2026-018](https://cert.europa.eu/publications/security-advisories/2026-018/) - [PHP security advisory: Critical remote code execution vulnerabilities, update now](https://www.php.net/archive/2026.php#2026-10-21-5) - [List of advisories from other EU national CSIRT's](https://github.com/enisaeu/CNW/blob/main/advisories/2026/CNW-2026-04_php.md) ## Repository contents | Directory | Purpose | | --- | --- | | [detection_mitigation](detection_mitigation) | Contains detection and mitigation material for the vulnerabilities. |

使用方式

仓库内容以目录形式组织，包含检测与缓解材料、软件清单和工具，可通过浏览或使用工具生成文件。

查看 README 依据

- [CERT-EU Security Advisory 2026-018](https://cert.europa.eu/publications/security-advisories/2026-018/) - [PHP security advisory: Critical remote code execution vulnerabilities, update now](https://www.php.net/archive/2026.php#2026-10-21-5) - [List of advisories from other EU national CSIRT's](https://github.com/enisaeu/CNW/blob/main/advisories/2026/CNW-2026-04_php.md) ## Repository contents | Directory | Purpose | | --- | --- | | [detection_mitigation](detection_mitigation) | Contains detection and mitigation material for the vulnerabilities. |

| [software](software) | Contains inventory lists of software products with a PHP dependency potentially affected by the vulnerabilities. | | [tools](tools) | Contains tools for using/generating files within this repo | Please note that this repository is not complete and is currently being expanded. ## Contributions welcome

已知限制

仓库内容尚不完整，正在扩充中。

查看 README 依据

| [software](software) | Contains inventory lists of software products with a PHP dependency potentially affected by the vulnerabilities. | | [tools](tools) | Contains tools for using/generating files within this repo | Please note that this repository is not complete and is currently being expanded. ## Contributions welcome