{"id":591,"date":"2026-10-22T16:24:46","date_gmt":"2026-10-22T08:24:46","guid":{"rendered":"https:\/\/vkt.hk\/case-study\/?p=591"},"modified":"2026-10-22T16:24:46","modified_gmt":"2026-10-22T08:24:46","slug":"php2shell-patched-on-22-oct-2026-356-hkt-gmt8","status":"publish","type":"post","link":"https:\/\/vkt.hk\/case-study\/2026\/10\/22\/php2shell-patched-on-22-oct-2026-356-hkt-gmt8\/","title":{"rendered":"php2shell \u56b4\u91cd\u4fdd\u5b89\u6f0f\u6d1e – 22-OCT-2026 3:56 HKT GMT+8 \u5df2\u7d93\u5b8c\u6210\u66f4\u65b0"},"content":{"rendered":"

\u4e8b\u4ef6\u6838\u5fc3\u6458\u8981<\/p>\n

\u6f0f\u6d1e\u4ee3\u865f\uff1aPHP2Shell\uff08\u5305\u542b\u5169\u500b\u91cd\u5927 CVE \u6f0f\u6d1e\uff1aCVE-2026-109618 \u8207 CVE-2026-109619\uff09\u3002<\/p>\n

\u56b4\u91cd\u7a0b\u5ea6\uff1aCVSS v4.0 \u8a55\u5206\u9ad8\u9054 9.2 \u5206\uff08\u90e8\u5206\u8cc7\u5b89\u6a5f\u69cb\u8a55\u70ba\u6eff\u5206 10.0\uff09\u3002
\n\u5f71\u97ff\u7bc4\u570d\uff1a\u5168\u7403 \u8fd1 7 \u6210\u4ee5 PHP \u9a45\u52d5\u7684\u7db2\u7ad9\uff08\u5305\u542b\u6240\u6709\u5e95\u5c64\u67b6\u69cb\u4f7f\u7528 WordPress, Laravel, Drupal, Joomla \u7684\u7ad9\u53f0\uff09\uff0c\u6f0f\u6d1e\u5b58\u5728\u65bc PHP \u6838\u5fc3\u5f15\u64ce\u4e2d\uff0c\u6a6b\u8de8 PHP 5.4 \u81f3 PHP 8 \u5168\u7248\u672c\u3002<\/p>\n

\u4e3b\u8981\u5371\u5bb3\uff1a\u514d\u767b\u5165\u9060\u7aef\u596a\u6b0a (RCE)\u3002\u672a\u7d93\u8eab\u5206\u9a57\u8b49\u7684\u653b\u64ca\u8005\uff0c\u53ea\u8981\u5c0d\u4f3a\u670d\u5668\u767c\u9001\u7cbe\u5fc3\u8a2d\u8a08\u7684\u60e1\u610f HTTP \u8acb\u6c42\uff0c\u5c31\u80fd\u76f4\u63a5\u5728\u4f3a\u670d\u5668\u4e0a\u57f7\u884c\u4efb\u610f\u7a0b\u5f0f\u78bc\u3001\u690d\u5165 WebShell\uff08\u5f8c\u9580\u7a0b\u5f0f\uff09\uff0c\u4e26\u7372\u53d6\u4e3b\u6a5f\u7684\u547d\u4ee4\u5217\uff08Shell\uff09\u63a7\u5236\u6b0a\u3002<\/p>\n

\u7dad\u4eac\u96fb\u8a0a\u5728 22-OCT-2026 3:56 HKT (GMT +8) \u5df2\u7d93\u5b8c\u6210\u5404\u670d\u52d9\u5668\u66f4\u65b0.<\/p>\n

\u7db2\u8def\u5b89\u5168, \u7db2\u8def\u7ba1\u7406\u54e1\u6709\u76e1\u5927\u8cac\u4efb, \u4e00\u5b9a\u8981\u53ca\u6642\u6253\u88dc\u4e01, \u7dad\u4eac\u96fb\u8a0a\u81f4\u529b\u63d0\u4f9b\u7a69\u5b9a\u7684\u7db2\u8def\u670d\u52d9, \u76e1\u5fc3\u70ba\u4f60\u6700\u5230\u6700\u597d \ud83d\ude09<\/p>\n

Core Event Summary<\/strong><\/p>\n

Vulnerability Code: PHP2Shell (includes two major CVE vulnerabilities: CVE-2026-109618 and CVE-2026-109619).
\n<\/strong><\/p>\n

Severity:<\/strong> CVSS v4.0 score is as high as 9.2 (rated a maximum of 10.0 by some cybersecurity organizations).<\/span><\/p>\n

Impact Scope:<\/strong> Affects nearly 70% of PHP-driven websites worldwide (including all sites built on underlying frameworks like WordPress, Laravel, Drupal, and Joomla). The vulnerability exists within the PHP core engine and spans all versions from PHP 5.4 to PHP 8.<\/p>\n

Primary Threat:<\/strong> Unauthenticated Remote Code Execution (RCE). An unauthenticated attacker can execute arbitrary code on the server, plant a WebShell (backdoor program), and gain command-line (Shell) control of the host simply by sending a carefully crafted malicious HTTP request to the server.<\/span><\/p>\n

Viking Telecom completed updates across all servers on 22-OCT-2026 at 3:56 HKT (GMT +8)<\/strong>.<\/p>\n

Cybersecurity and network administrators bear a massive responsibility to apply patches in a timely manner. Viking Telecom is committed to providing stable network services and dedicated to doing our absolute best for you! \ud83d\ude09<\/p>\n

\"Php2shell\"<\/p>\n

\"Patched<\/p>\n

\"1000042172\"<\/p>\n

\"1000042184\"<\/p>\n

we also build the most updated apache<\/p>\n

\"1000041938\"<\/p>\n

\u5bc6\u5207\u95dc\u6ce8 php.net \u5b98\u65b9\u7db2\u7ad9\u9810\u544a\u63a8\u51fa\u91cd\u5927\u4fdd\u5b89\u6f0f\u6d1e\u88dc\u4e01<\/p>\n

Closely monitoring the php.net official website for the upcoming critical security patch announcement.<\/p>\n

\"1000042171\"<\/p>\n

php.net \u516c\u544a\u88dc\u4e01\u5df2\u7d93\u63a8\u9001, \u6211\u5011\u99ac\u4e0a\u70ba\u5404\u670d\u52d9\u5668\u6253\u88dc\u4e01<\/p>\n

The security patch advisory has been officially released on php.net, and we are immediately deploying the patches across all of our servers.<\/p>\n","protected":false},"excerpt":{"rendered":"

\u4e8b\u4ef6\u6838\u5fc3\u6458\u8981 \u6f0f\u6d1e\u4ee3\u865f\uff1aPHP2Shell\uff08\u5305\u542b\u5169\u500b\u91cd\u5927 CVE \u6f0f\u6d1e\uff1aCVE-2026-109618 \u8207 CVE-2026-109619\uff09\u3002 \u56b4\u91cd\u7a0b\u5ea6\uff1aCVSS v4.0 \u8a55\u5206\u9ad8\u9054 9.2 \u5206\uff08\u90e8\u5206\u8cc7\u5b89\u6a5f\u69cb\u8a55\u70ba\u6eff\u5206 10.0\uff09\u3002 \u5f71\u97ff\u7bc4\u570d\uff1a\u5168\u7403 \u8fd1 7 \u6210\u4ee5 PHP \u9a45\u52d5\u7684\u7db2\u7ad9\uff08\u5305\u542b\u6240\u6709\u5e95\u5c64\u67b6\u69cb\u4f7f\u7528 WordPress, Laravel, Drupal, Joomla \u7684\u7ad9\u53f0\uff09\uff0c\u6f0f\u6d1e\u5b58\u5728\u65bc PHP \u6838\u5fc3\u5f15\u64ce\u4e2d\uff0c\u6a6b\u8de8 PHP 5.4 \u81f3 PHP 8 \u5168\u7248\u672c\u3002 \u4e3b\u8981\u5371\u5bb3\uff1a\u514d\u767b\u5165\u9060\u7aef\u596a\u6b0a (RCE)\u3002\u672a\u7d93\u8eab\u5206\u9a57\u8b49\u7684\u653b\u64ca\u8005\uff0c\u53ea\u8981\u5c0d\u4f3a\u670d\u5668\u767c\u9001\u7cbe\u5fc3\u8a2d\u8a08\u7684\u60e1\u610f HTTP \u8acb\u6c42\uff0c\u5c31\u80fd\u76f4\u63a5\u5728\u4f3a\u670d\u5668\u4e0a\u57f7\u884c\u4efb\u610f\u7a0b\u5f0f\u78bc\u3001\u690d\u5165 WebShell\uff08\u5f8c\u9580\u7a0b\u5f0f\uff09\uff0c\u4e26\u7372\u53d6\u4e3b\u6a5f\u7684\u547d\u4ee4\u5217\uff08Shell\uff09\u63a7\u5236\u6b0a\u3002 \u7dad\u4eac\u96fb\u8a0a\u5728 22-OCT-2026 3:56 HKT (GMT +8) \u5df2\u7d93\u5b8c\u6210\u5404\u670d\u52d9\u5668\u66f4\u65b0. \u7db2\u8def\u5b89\u5168, \u7db2\u8def\u7ba1\u7406\u54e1\u6709\u76e1\u5927\u8cac\u4efb, \u4e00\u5b9a\u8981\u53ca\u6642\u6253\u88dc\u4e01, \u7dad\u4eac\u96fb\u8a0a\u81f4\u529b\u63d0\u4f9b\u7a69\u5b9a\u7684\u7db2\u8def\u670d\u52d9, \u76e1\u5fc3\u70ba\u4f60\u6700\u5230\u6700\u597d \ud83d\ude09 Core Event Summary Vulnerability Code: PHP2Shell […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"slim_seo":{"title":"php2shell \u56b4\u91cd\u4fdd\u5b89\u6f0f\u6d1e - 22-OCT-2026 3:56 HKT GMT+8 \u5df2\u7d93\u5b8c\u6210\u66f4\u65b0 - Viking Telecom case study","description":"\u4e8b\u4ef6\u6838\u5fc3\u6458\u8981 \u6f0f\u6d1e\u4ee3\u865f\uff1aPHP2Shell\uff08\u5305\u542b\u5169\u500b\u91cd\u5927 CVE \u6f0f\u6d1e\uff1aCVE-2026-109618 \u8207 CVE-2026-109619\uff09\u3002 \u56b4\u91cd\u7a0b\u5ea6\uff1aCVSS v4.0 \u8a55\u5206\u9ad8\u9054 9.2 \u5206\uff08\u90e8\u5206\u8cc7\u5b89\u6a5f\u69cb\u8a55\u70ba\u6eff\u5206 10.0\uff09\u3002 \u5f71\u97ff\u7bc4\u570d\uff1a\u5168\u7403 \u8fd1 7 \u6210\u4ee5 PHP \u9a45\u52d5\u7684\u7db2\u7ad9\uff08\u5305\u542b\u6240\u6709\u5e95\u5c64\u67b6\u69cb\u4f7f\u7528 WordPres"},"_slim_seo_primary_term_category":0,"_slim_seo_primary_term_post_tag":0,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-591","post","type-post","status-publish","format-standard","hentry","category-viking-telecom"],"_links":{"self":[{"href":"https:\/\/vkt.hk\/case-study\/wp-json\/wp\/v2\/posts\/591","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vkt.hk\/case-study\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vkt.hk\/case-study\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vkt.hk\/case-study\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/vkt.hk\/case-study\/wp-json\/wp\/v2\/comments?post=591"}],"version-history":[{"count":1,"href":"https:\/\/vkt.hk\/case-study\/wp-json\/wp\/v2\/posts\/591\/revisions"}],"predecessor-version":[{"id":598,"href":"https:\/\/vkt.hk\/case-study\/wp-json\/wp\/v2\/posts\/591\/revisions\/598"}],"wp:attachment":[{"href":"https:\/\/vkt.hk\/case-study\/wp-json\/wp\/v2\/media?parent=591"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vkt.hk\/case-study\/wp-json\/wp\/v2\/categories?post=591"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vkt.hk\/case-study\/wp-json\/wp\/v2\/tags?post=591"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}