IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE2 IOCs

CVE-2026-109618 and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

RA
Rapid7
Published October 21, 2026Original Report

Diamond Model

Indicators of Compromise

2 indicators

TypeIndicatorConfidenceScoreFirst Seen
CVECVE-2026-109618HighScore 80/100First seen
CVECVE-2026-109619HighScore 75/100First seen

IOC Relationship Graph

2 total IOCs
CVE
CVE2CVE-2026-109618 and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPREPORTCVE-2026-109618CVE-2026-109619
scroll to zoom · drag to pan · click IOC to open