PHP2Shell Exploits Target Systems with Mirai Malware

Threat actors are actively attempting to exploit newly disclosed PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) with a CVSS score of 9.2 to deploy the Potassium variant of the Mirai botnet. The flaws allow unauthenticated remote code execution. Although weaponization has proven difficult for attackers so far, administrators must apply security patches immediately to mitigate potential system compromises.